Revert "fix: CSRF 토큰 폴백 엔드포인트 추가 (GET /api/auth/csrf-token)"

This reverts commit a6b7125.

Author: yongseong123

src/main/java/com/bootsignal/domain/auth/controller/AuthController.java

@@ -13,7 +13,6 @@
 import com.bootsignal.domain.auth.dto.SignupRequest;
 import com.bootsignal.domain.auth.dto.SignupResponse;
 import com.bootsignal.domain.auth.service.AuthService;
-import com.bootsignal.global.response.ApiResponse;
 import com.bootsignal.global.security.jwt.JwtTokenCookieManager;
 import jakarta.servlet.http.HttpServletRequest;
 import jakarta.servlet.http.HttpServletResponse;
@@ -110,11 +109,4 @@ public void logout(HttpServletRequest request, HttpServletResponse response) {
 			jwtTokenCookieManager.clearTokenCookies(response);
 		}
 	}
-
-	// JS가 쿠키 도메인 불일치로 XSRF-TOKEN을 읽지 못하는 경우의 폴백 엔드포인트.
-	// CORS로 허용된 오리진만 응답을 읽을 수 있으므로 토큰 노출 위험이 없다.
-	@GetMapping("/csrf-token")
-	public ApiResponse<String> csrfToken(HttpServletRequest request) {
-		return ApiResponse.success(jwtTokenCookieManager.resolveCsrfToken(request));
-	}
 }

src/main/java/com/bootsignal/global/config/SecurityConfig.java

@@ -67,8 +67,7 @@ public SecurityFilterChain securityFilterChain(
 					"/api/auth/refresh",
 					"/api/auth/logout",
 					"/api/auth/password/forgot",
-					"/api/auth/password/reset",
-					"/api/auth/csrf-token"
+					"/api/auth/password/reset"
 				).permitAll()
 				.requestMatchers(HttpMethod.GET, "/api/courses", "/api/courses/**").permitAll()
 				.requestMatchers(HttpMethod.GET, "/api/course-sessions/**").permitAll()