csrfField() doesn't exist — the actual pattern is a hidden input
with name="_csrf" and value from Auth::csrfToken().
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>