Fix: take csrf token from admin form or cms toolbar instead of cookie

[fsbraun]

Description

This PR fixes #7568 which causes JS to fail if CSRF_COOKIE_HTTPONLY is set to True.

The codebase now does not contain any JavaScript access to cookies any more, which would be blocked by CSRF_COOKIE_HTTPONLY = True.

Related resources

• [BUG] Many JS errors thrown with djangocms-versioning when using CSRF_COOKIE_HTTPONLY = True #7568

Checklist

• I have opened this pull request against develop-4
• I have added or modified the tests when changing logic
• I have followed the conventional commits guidelines to add meaningful information into the changelog
• I have read the contribution guidelines and I have joined #workgroup-pr-review on Slack to find a “pr review buddy” who is going to review my pull request.

[adam-murray]

Best code I've seen in at least 15 minutes!