Enable csrf tokens on API routes

* Upgrade openapi-ts
* Migrate openapi-ts settings to new version
* Add csrf token to headers of all API calls
* Force csrf token authentication on API routes

openapi-csrf.ts

@@ -0,0 +1,9 @@
+import Cookies from "js-cookie";
+import type { CreateClientConfig } from "#openapi";
+
+export const createClientConfig: CreateClientConfig = (config) => ({
+  ...config,
+  headers: {
+    "X-CSRFToken": Cookies.get("csrftoken"),
+  },
+});