fix(service-desk): fix CSRF token field name for ticket issuance

The ticket form and lookup in service-desk sent '_token' but the CSRF
middleware expects '_csrf_token'. This caused HTTP 419 on every ticket
issuance attempt.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

app/Modules/SportsActivity/Views/service-desk/index.php

@@ -161,7 +161,7 @@ document.addEventListener('DOMContentLoaded', function() {
         fetch('/sa/service-desk/lookup', {
             method: 'POST',
             headers: {'Content-Type': 'application/x-www-form-urlencoded', 'X-Requested-With': 'XMLHttpRequest'},
-            body: '_token=' + encodeURIComponent(document.querySelector('meta[name="csrf-token"]')?.content || '') + '&national_id=' + encodeURIComponent(nid)
+            body: '_csrf_token=' + encodeURIComponent(document.querySelector('meta[name="csrf-token"]')?.content || '') + '&national_id=' + encodeURIComponent(nid)
         })
         .then(function(r) { return r.json(); })
         .then(function(data) {
@@ -214,7 +214,7 @@ document.addEventListener('DOMContentLoaded', function() {
         e.preventDefault();
         var formData = new FormData(this);
         var params = new URLSearchParams(formData);
-        params.append('_token', document.querySelector('meta[name="csrf-token"]')?.content || '');
+        params.append('_csrf_token', document.querySelector('meta[name="csrf-token"]')?.content || '');
 
         document.getElementById('ticketResult').innerHTML = '<span style="color:#6B7280;">جاري الإصدار...</span>';