I was able to make this work by changing the sqltask.SqlSourceType to "Variable" and setting the SourceVariable to User::sqlstmt. Then pass the value in like this:
c:\dtexec /f "c:\parampass.dtsx" /SET \package.variables[User::sqlstmt];"truncatetable...