Fix My Library Canonical CSRF is now installed.
tg_form_token_input() on current portal pages is provided by includes/security.php and submits csrf_token. library-action.php now validates that canonical field and retains form_token fallback for legacy cached forms.

