Fix/2.30.0 (#206)

* fix: remove csrf and use strict mode

* refactor: Remove client-side CSRF token caching, retry logic, and authentication data clearing utilities from the HTTP client.

---------

Co-authored-by: 姚凯 <kai.yao@chaitin.com>
Co-authored-by: awesomeYG <gang.yang@chaitin.com>

Author: 3 people

backend/intercept/csrf.go

@@ -1,6 +1,8 @@
 package intercept
 
 import (
+	"net/http"
+
 	"github.com/chaitin/koalaqa/pkg/context"
 	"github.com/chaitin/koalaqa/pkg/util"
 	"github.com/gin-contrib/sessions"
@@ -26,6 +28,7 @@ func newSession() Interceptor {
 }
 
 func (s *session) Intercept(ctx *context.Context) {
+	ctx.SetSameSite(http.SameSiteStrictMode)
 	s.handler(ctx.Context)
 }