Limit-on-update/delete is useful for, amongst other things, bounding the 
amount of work done in a single SQL statement. It is not enabled by 
upstream by default, but Debian does enable it.

Because the parser generator doesn't receive NIX_CFLAGS_COMPILE, the 
setting has to go through the --enable-update-limit configure flag. 
Maybe in the future, if this derivation moves to e.g. CFLAGS, this 
feature enablement can be made uniform with the others.

Adds the @NixOS/security-review team as a maintainer to multiple
packages deemed to be important security-wise.

For the motivation of the package list, see:
https://github.com/NixOS/nixpkgs/issues/494349#issuecomment-4005099033

The tests seem to be unreliable (at least when SQLite is built by the
Nix daemon). Sometimes they succeed, but they often do not.

Even if SQLite were removed from the bootstrap, this would still be a
problem, so disable the tests for now.

TCL support requires building libtclsqlite as a shared library.

Fixes: a3987ff32852 ("sqlite: Build canonical source with tcl")

Possible after parent commit

Though this does increase build time from ~2 mins to ~12mins on my machine

See
https://github.com/sqlite/sqlite/blob/051e942f5db1cbc3fce64d3a52df7428fe517de4/autoconf/README.txt#L27-L40
for motivation

Also adds support for the TCL sqlite library