"""Middleware package for the FastAPI app. Stage 2 ships :mod:`src.api.middleware.csrf` — see CONTRACT.md §3 + BACKEND_BUILD.md §6.4 for the CSRF strategy. Other middlewares (request-id correlation, slow-query diagnostics, repo→error mapping) land in later stages per BACKEND_BUILD.md §4. """ __all__: list[str] = []