Custom sample filtering performance and security improvement

[dippindots]

Fix #11195

• concat has poor performance during my test, we should try to not use concat in a large foreach clause
• clickhouse support native array in the query, and it has better performance, try replace large foreach with array

In this pull request:

• Change back from string to prepared statement for security reason
• Use native array to improve performance

[sonarqubecloud]

Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
50.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud