feat: implement CSRF protection across forms and routes

crates/adapters/template-askama/templates/new_review.html

@@ -35,6 +35,7 @@
     Comment<br>
     <textarea name="comment"></textarea>
   </label>
+  <input type="hidden" name="_csrf" value="{{ ctx.csrf_token }}">
   <button type="submit">Log Review</button>
 </form>
 {% endblock %}