Ghostferry should abort if it sees a DDL command that can compromise data integrity

[shuhaowu]

For the time being, Ghostferry should abort on DDL commands that it sees in the binlog if it cannot handle it safely. For the time being, this includes all schema changes. Other commands need also to be identified on a case by case basis. We should use this issue to discuss which ones we should forbid.