feature: add csrf token to the tasklist docs

[nathansandi]

Description

We add the CSRF Token protections for the version: 8.5.1 and 8.6.0-alpha1. On the docs I am bringing a short explanation how to enabled/disabled this for self-managed. Also considering the cookies authentication on API, API developers should disable CSRF Protection in order to use the operations on API without blockers on POST operations.

When should this change go live?

• [x] This change is not yet live and should not be merged until 07/05/2024 (apply hold label or convert to draft PR)?
• [x] There is no urgency with this change.
• [x] This is a bug fix or security concern.

PR Checklist

• [x] I have added changes to the relevant /versioned_docs directory, or they are not for an already released version.
• [x] I have added changes to the main /docs directory (aka /next/), or they are not for future versions.
• [x] My changes require an Engineering review, and I've assigned an engineering manager or tech lead as a reviewer, or my changes do not require an Engineering review.
• [x] My changes require a technical writer review, and I've assigned @christinaausley as a reviewer, or my changes do not require a technical writer review.

[akeller]

@nathansandi you are good to merge! Let us know if you'd also like the docs released shortly after since your release date is not in line with a scheduled alpha release.

[akeller]

Merging so I can reference these docs changes in the alpha1 release notes.