Checklist-Guided Reinforcement Learning for Adaptive SQL Injection Detection with Dynamic WAF Evasion