Cast Any returns to eliminate no-any-return errors in strict mypy

[helylle]

Cast Any returns to eliminate no-any-return errors in strict mypy

Summary

• Add cast() at third-party library boundaries to eliminate all 75 [no-any-return] strict mypy errors
• Fix real type bug: vccs/client _execute_request_response declared -> str but urlopen().read() returns bytes
• Remove dead isinstance branch in userdb/user.py _parse_profiles (unreachable code, now matches sibling parsers)

Sources of Any

All casts are at boundaries where untyped third-party libraries return Any:

Source	Files	Errors fixed
Celery AsyncResult.get() via celery-types stub limitation	relay classes, worker tasks	13
@MarshalWith decorator returning Callable[..., Any] (inter-view calls)	group_management, jsconfig	10
response.json() (requests/hammock)	ekopost, scimapi tests	8
json.loads()	test helpers, redis_session	7
Untyped libs (yubihsm, jwcrypto, pwgen, smscom, ndnkdf, suds)	vccs, common, workers	10
WSGI Callable[..., Any]	middleware, debug	4
Starlette state (Any)	context_request (2 files)	2
pysaml2 untyped returns	authn/utils, satosa	3
MongoDB/Neo4j untyped returns	graphdb, testing, vccs/server	5
Other (decorator wrappers, fido_mds)	idp/decorators, test_webauthn	5

Strict mypy error reduction

• [no-any-return]: 75 → 0
• Total: 98 → 25 (remaining: 16 [misc] SATOSA stubs, 7 [type-arg] variance, 2 other)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud