Add test coverage for CSRF-disabled scenarios

[Copilot]

Addresses missing test coverage for csrfEnabled = false configuration in CBWIREController, as identified in PR #238 review feedback.

Changes

• Test: Request processing without CSRF verification - Validates that requests succeed with invalid tokens when csrfEnabled = false
• Test: Token generation when disabled - Validates that generateCSRFToken() returns empty string when CSRF is disabled

Both tests properly isolate settings changes to avoid test pollution.

it( "should process requests without CSRF verification when csrfEnabled = false", function() {
    var settings = getInstance( "coldbox:modulesettings:cbwire" );
    settings.csrfEnabled = false;
    
    var payload = incomingRequest(
        csrfToken = "badToken"  // Invalid token should not throw
    );
    
    var response = cbwireController.handleRequest( payload, event );
    expect( isStruct( response ) ).toBeTrue();
} );

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.