patch CSRF and CI

backend/core/settings/development.py

@@ -4,6 +4,18 @@ DEBUG = True
 # ALLOWED_HOSTS = ['localhost', '127.0.0.1', 'backend']
 ALLOWED_HOSTS = ['*']
 
+# CSRF trusted origins (env + poznate domene)
+CSRF_TRUSTED_ORIGINS = [
+    origin.strip()
+    for origin in os.environ.get('CSRF_TRUSTED_ORIGINS', '').split(',')
+    if origin.strip()
+] + [
+    'https://api-004.captain.mitteworkspace.cloud',
+    'https://serviseri-004.captain.mitteworkspace.cloud',
+    'http://localhost:4321',
+    'http://127.0.0.1:4321',
+]
+
 # SQLite za brzi lokalni razvoj (nema potrebe za instalacijom Postgresa na laptopu)
 # DATABASES = {
 #     'default': {