fix(adapter): match DuckDB 1.5.x external-access denial wording

DuckDB 1.5.x reworded its runtime denial from "Cannot change
enable_external_access setting while database is running" to "Cannot
enable external access while database is running". The pinned matcher in
is_duckdb_external_access_blocked() no longer matched, so the raw
InvalidInputException escaped unwrapped instead of becoming
DuckDBExternalAccessBlocked — breaking the HTTP 400 contract and turning
CI red (test_blocks_external_access_sql_when_disabled[SET bypass]) once
duckdb==1.5.2 resolved.

Add the new wording to the pinned denial list, keeping the old one for
DuckDB <= 1.4.x still in use.

Validated locally against both duckdb 1.4.4 and 1.5.2: the SET-bypass
case fails without this change and passes with it.

Refs DRC-3578

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Wei-Chun, Chang <wcchang@infuseai.io>

Author: 2 people

recce/exceptions.py

@@ -37,7 +37,10 @@ def __init__(self, original_message: str):
 _DUCKDB_EXTERNAL_ACCESS_DENIAL_MESSAGES = (
     "file system operations are disabled by configuration",
     "Loading external extensions is disabled through configuration",
+    # DuckDB <= 1.4.x
     "Cannot change enable_external_access setting while database is running",
+    # DuckDB >= 1.5.x reworded this denial
+    "Cannot enable external access while database is running",
 )