Locked query field for system badges

[cpradio]

Here are the steps for enabling the SQL Badge Queries

Badge SQL can no longer be edited by default

Starting from Discourse 1.6 badge sql can no longer be edited by admins unless explicitly enabled. This change was made for a couple of reasons Security: allowing admins to enter SQL directly allows them raw access to the database, generally we are opting that raw access to the database from the web UI is a feature you opt-in for. Even though the queries only return user_ids, an admin attacker can discover any information in the database using badge queries. If column A of table Y has the le…