[BUGFIX] Pass sanitized additional where as string in DatabaseRecordList

The RecordListGetTable hook allows to add an additional
where clause to the recordlist query. Since the sanitized
result was wrapped in an array before being passed to
$queryBuilder->andWhere(), this led to an exception.

This is now fixed by passing the sanitized clause as
string to `addWhere()`.

Resolves: #96378
Related: #92065
Releases: main, 11.5
Change-Id: I99fa184f49f9db9f7edf061d4137e1e6c275446e
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/72699


Tested-by: core-ci <typo3@b13.com>
Tested-by: Benni Mack <benni@typo3.org>
Tested-by: Jochen <rothjochen@gmail.com>
Tested-by: Stefan Bürk <stefan@buerk.tech>
Tested-by: Oliver Bartsch <bo@cedev.de>
Reviewed-by: Benni Mack <benni@typo3.org>
Reviewed-by: Jochen <rothjochen@gmail.com>
Reviewed-by: Stefan Bürk <stefan@buerk.tech>
Reviewed-by: Oliver Bartsch <bo@cedev.de>