sql.py: mk_update(): Factored out filtering of input values so only `.to_str(db)` is used inline in the creation of the query