add a helper to project admin include for ultranormalization collisions

[ewdurbin]

resolves #17113

Example:

To fix the problem, we need to escape the project_name before including it in the returned dictionary. This can be done using the html.escape() function from the html module in Python, which is designed to escape special characters in strings to prevent XSS attacks.

We will import the html module and use the html.escape() function to sanitize the project_name before it is included in the returned dictionary.

[miketheman]

Nice stuff! I have sone suggestion for optimizing the query - it's not going to be materially impactful due to the low usage/latency of this view, but I'd be remiss if I didn't note it.

[miketheman]

Optimize: Since we're not using any part of the results other than the colliding name we can optimize and only return the name part from the DB, saving data load/roundtrip, serialization work, etc.
This is more aligned with modern SQLAlchemy syntax, where we construct a statement and pass it to the session.

Needs an update to import select as well

collisions = request.db.scalars(
    select(Project.name)
    .filter(
        func.ultranormalize_name(Project.name)
        == func.ultranormalize_name(project_name)
    )
    .filter(
        func.normalize_pep426_name(Project.name)
        != func.normalize_pep426_name(project_name)
    )
).all()

And then no need to listcomp "collisions" later, since it'll be constructed as a list of strings.