fix: relax _parse_admin_form parameter type for FormData compat

Starlette's FormData is not Mapping[str, str] — values may be
str or UploadFile. mypy on CI catches the mismatch (locally it
slipped through under a more permissive version).

Widen the parameter type to Mapping[str, Any]; the parser only
reads keys that hold str values and coerces via str() where needed,
so behaviour is unchanged.

Author: AABur

kardscm/web/app.py

@@ -8,6 +8,7 @@
 from collections.abc import Mapping
 from contextlib import closing
 from pathlib import Path
+from typing import Any
 
 from fastapi import Depends, FastAPI, Form, HTTPException, Query, Request, Response
 from fastapi.responses import HTMLResponse
@@ -411,14 +412,16 @@ def healthz() -> dict[str, str]:
     return app
 
 
-def _parse_admin_form(form: Mapping[str, str]) -> dict:
+def _parse_admin_form(form: Mapping[str, Any]) -> dict:
     """Parse the admin edit form into a fields dict for update_card_admin.
 
     Validates ranges and categorical values. Empty number inputs map to None.
     Title is required non-empty; text may be empty.
 
     Args:
         form: A Starlette FormData (or any mapping-like object exposing .get).
+            Values may be ``str`` or ``UploadFile``; non-string values for the
+            keys this parser reads are coerced via ``str()`` where needed.
     """
     fields: dict = {}