fix(recaptcha): extract token from first list item in clean()

[SoheilJafari]

fix(forms): use first value for reCAPTCHA token

The widget can submit g-recaptcha-response as a one-item list. Passing the list string to CharField.clean() caused Google /siteverify to return "invalid-input-response". We now read values[0] and handle str/list safely.