chore: Fix setup of Altcha

This avoids to include the code of Altcha in application.js while:

1. Altcha may be not enabled
2. Altcha is only used on the registration page

Author: marienfressinaud

package.json

@@ -4,8 +4,8 @@
   "repository": "github:flusio/Flus",
   "type": "module",
   "scripts": {
-    "watch": "esbuild --bundle --loader:.woff=file --loader:.woff2=file --loader:.svg=file --sourcemap --outdir=public/dev_assets --watch=forever src/assets/*/application.*",
-    "build": "esbuild --bundle --loader:.woff=file --loader:.woff2=file --loader:.svg=file --sourcemap --outdir=public/assets --minify src/assets/*/application.*",
+    "watch": "esbuild --bundle --loader:.woff=file --loader:.woff2=file --loader:.svg=file --sourcemap --outdir=public/dev_assets --watch=forever src/assets/*/application.* src/assets/javascripts/altcha.js",
+    "build": "esbuild --bundle --loader:.woff=file --loader:.woff2=file --loader:.svg=file --sourcemap --outdir=public/assets --minify src/assets/*/application.* src/assets/javascripts/altcha.js",
     "lint-js": "eslint -c .eslint.config.js src/assets/javascripts/",
     "lint-js-fix": "eslint -c .eslint.config.js --fix src/assets/javascripts/",
     "lint-css": "stylelint src/assets/stylesheets/**/*.css",

src/assets/javascripts/altcha.js

@@ -0,0 +1,2 @@
+import 'altcha';
+import 'altcha/i18n/fr-fr';

src/assets/javascripts/application.js

@@ -1,9 +1,6 @@
 import * as Turbo from '@hotwired/turbo';
 import { Application } from '@hotwired/stimulus';
 
-import 'altcha';
-import 'altcha/i18n/fr-fr';
-
 import AutosubmitController from './controllers/autosubmit_controller.js';
 import AutosaveController from './controllers/autosave_controller.js';
 import BackButtonController from './controllers/back_button_controller.js';

src/views/registrations/new.html.twig

@@ -14,6 +14,7 @@
 {% block head_additional_tags %}
     {# Require a full reload of the page if Altcha is enabled as CSP headers are set. #}
     {% if form.mustCheckAltcha() %}
+        <script src="{{ url_asset('javascripts/altcha.js') }}" data-turbo-track="reload" defer></script>
         <meta name="turbo-visit-control" content="reload">
     {% endif %}
 {% endblock %}