Fix missing CSRF tokens in all delete forms

- Added @Html.AntiForgeryToken() to Products delete form
- Added @Html.AntiForgeryToken() to Categories delete form
- Added @Html.AntiForgeryToken() to Users delete form
- Added @Html.AntiForgeryToken() to ShippingRates delete form
- Added @Html.AntiForgeryToken() to Product Variations delete form

This fixes the 400 Bad Request errors when trying to delete items

.claude/settings.local.json

@@ -30,7 +30,9 @@
       "Bash(tasklist)",
       "Bash(findstr:*)",
       "Read(//mnt/c/Production/Source/SilverLABS/SilverPAY/**)",
-      "Bash(git commit:*)"
+      "Bash(git commit:*)",
+      "Bash(docker build:*)",
+      "Bash(git fetch:*)"
     ],
     "deny": [],
     "ask": []

LittleShop/Areas/Admin/Views/Categories/Index.cshtml

@@ -58,6 +58,7 @@
                                         </a>
                                         <form method="post" action="@Url.Action("Delete", new { id = category.Id })" class="d-inline"
                                               onsubmit="return confirm('Are you sure you want to delete this category?')">
+                                            @Html.AntiForgeryToken()
                                             <button type="submit" class="btn btn-outline-danger">
                                                 <i class="fas fa-trash"></i>
                                             </button>

LittleShop/Areas/Admin/Views/Products/Index.cshtml

@@ -115,6 +115,7 @@
                                         </a>
                                         <form method="post" action="@Url.Action("Delete", new { id = product.Id })" class="d-inline"
                                               onsubmit="return confirm('Are you sure you want to delete this product?')">
+                                            @Html.AntiForgeryToken()
                                             <button type="submit" class="btn btn-outline-danger" title="Delete Product">
                                                 <i class="fas fa-trash"></i>
                                             </button>

LittleShop/Areas/Admin/Views/Products/Variations.cshtml

@@ -80,6 +80,7 @@
                                         </a>
                                         <form method="post" action="@Url.Action("DeleteVariation", new { id = variation.Id })" class="d-inline"
                                               onsubmit="return confirm('Are you sure you want to delete this variation?')">
+                                            @Html.AntiForgeryToken()
                                             <button type="submit" class="btn btn-outline-danger" title="Delete Variation">
                                                 <i class="fas fa-trash"></i>
                                             </button>

LittleShop/Areas/Admin/Views/ShippingRates/Index.cshtml

@@ -64,6 +64,7 @@
                                         </a>
                                         <form method="post" action="@Url.Action("Delete", new { id = rate.Id })" class="d-inline"
                                               onsubmit="return confirm('Are you sure you want to delete this shipping rate?')">
+                                            @Html.AntiForgeryToken()
                                             <button type="submit" class="btn btn-outline-danger">
                                                 <i class="fas fa-trash"></i>
                                             </button>

LittleShop/Areas/Admin/Views/Users/Index.cshtml

@@ -70,6 +70,7 @@
                                         {
                                             <form method="post" action="@Url.Action("Delete", new { id = user.Id })" class="d-inline"
                                                   onsubmit="return confirm('Are you sure you want to delete this user?')">
+                                                @Html.AntiForgeryToken()
                                                 <button type="submit" class="btn btn-outline-danger">
                                                     <i class="fas fa-trash"></i>
                                                 </button>