fix: SQL injection in add owner cells filter

Since YOURLS v1.7.3 the SQL escaping function, `yourls_escape` is
automatically called inside a SQL query as long as the query variables
are passed as `binds` to the engine.

See: https://docs.yourls.org/development/database-queries.html#upgrade-your-code-for-1-7-3