Heimdall: LLM Read-Only Security for PostgreSQL Databases