API security

[jayrmotta]

Currently Mujina's API has no authentication, authorization, or other common HTTP security features (ie CSRF protection).

I think we could start simple with CSRF protection to avoid issues the CVE-2025-27579 we had with ESP-miner.

Ideally in the future we could have some mechanism to auth as well, although that one requires further discussion on how to do it.