fix(middlware): add middleware to prevent clickjacking

Ref: https://docs.djangoproject.com/en/5.0/ref/clickjacking/

Closes: #47

apis_acdhch_default_settings/settings.py

@@ -153,6 +153,7 @@
     "django.middleware.csrf.CsrfViewMiddleware",
     "django.contrib.auth.middleware.AuthenticationMiddleware",
     "django.contrib.messages.middleware.MessageMiddleware",
+    "django.middleware.clickjacking.XFrameOptionsMiddleware",
     "csp.middleware.CSPMiddleware",
     "crum.CurrentRequestUserMiddleware",
 ]