fix: address CodeRabbit PR comments — docs, test assertions, await

- Add Oracle and SQLite docs sections to warehouses.md (were supported
  but undocumented, making "12 warehouse types" claim incomplete)
- Use strict `toBe` assertions for LIMIT comment bypass tests to verify
  exact query shape (not just substring)
- Add missing `await` on `rejects.toThrow` to prevent flaky test

Author: anandgupta42

docs/docs/configure/warehouses.md

@@ -348,6 +348,53 @@ If you're already authenticated via `gcloud`, omit `credentials_path`:
 !!! info "Server compatibility"
     The ClickHouse driver supports ClickHouse server versions 23.3 and later, covering all non-EOL releases. This includes LTS releases 23.8, 24.3, 24.8, and all stable releases through the current version.
 
+## Oracle
+
+```json
+{
+  "oracle-prod": {
+    "type": "oracle",
+    "host": "localhost",
+    "port": 1521,
+    "service_name": "ORCL",
+    "user": "analyst",
+    "password": "{env:ORACLE_PASSWORD}"
+  }
+}
+```
+
+| Field | Required | Description |
+|-------|----------|-------------|
+| `connection_string` | No | Full connect string (alternative to individual fields, e.g. `host:1521/ORCL`) |
+| `host` | No | Hostname (default: `127.0.0.1`) |
+| `port` | No | Port (default: `1521`) |
+| `service_name` | No | Oracle service name (default: `ORCL`) |
+| `database` | No | Alias for `service_name` |
+| `user` | No | Username |
+| `password` | No | Password |
+
+!!! info "Pure JavaScript driver"
+    The Oracle driver uses `oracledb` in thin mode (pure JavaScript) — no Oracle Instant Client installation is required.
+
+## SQLite
+
+```json
+{
+  "dev-sqlite": {
+    "type": "sqlite",
+    "path": "./dev.sqlite"
+  }
+}
+```
+
+| Field | Required | Description |
+|-------|----------|-------------|
+| `path` | No | Database file path. Omit or use `":memory:"` for in-memory |
+| `readonly` | No | Open in read-only mode (default: `false`) |
+
+!!! note
+    SQLite uses Bun's built-in `bun:sqlite` driver. WAL journal mode is enabled automatically for writable databases.
+
 ## SQL Server
 
 ```json

packages/drivers/test/clickhouse-unit.test.ts

@@ -151,14 +151,14 @@ describe("ClickHouse driver unit tests", () => {
     test("LIMIT in SQL comment does NOT prevent LIMIT injection", async () => {
       mockQueryResult = [{ id: 1 }]
       await connector.execute("SELECT * FROM t -- LIMIT 100", 10)
-      // Should still append LIMIT because the comment-stripped SQL has no LIMIT
-      expect(mockQueryCalls[0].query).toContain("LIMIT 11")
+      // Injected LIMIT must be on its own line, NOT inside the trailing comment
+      expect(mockQueryCalls[0].query).toBe("SELECT * FROM t -- LIMIT 100\nLIMIT 11")
     })
 
     test("LIMIT in block comment does NOT prevent LIMIT injection", async () => {
       mockQueryResult = [{ id: 1 }]
       await connector.execute("SELECT * FROM t /* LIMIT 50 */", 10)
-      expect(mockQueryCalls[0].query).toContain("LIMIT 11")
+      expect(mockQueryCalls[0].query).toBe("SELECT * FROM t /* LIMIT 50 */\nLIMIT 11")
     })
 
     test("real LIMIT in SQL still prevents double LIMIT", async () => {
@@ -275,7 +275,7 @@ describe("ClickHouse driver unit tests", () => {
     test("execute before connect throws clear error", async () => {
       const freshConnector = await connect({ host: "localhost" })
       // Don't call connect()
-      expect(freshConnector.execute("SELECT 1")).rejects.toThrow("not connected")
+      await expect(freshConnector.execute("SELECT 1")).rejects.toThrow("not connected")
     })
 
     test("close is idempotent", async () => {