feat: adding captcha and user_id logs

[nicolasauler]

Added user_id manually whenever auth_session is used (by subscribing to the axum_login tracing).
Closes #63

Added captcha, by using Friendly Captcha, to public routes.
Solutions are verified.
Closes #20

Add security job as requirement to shuttle deploy job.

TODO:

• implement security headers in a good way fix: reimplement security headers for every request #71
• fix: csp script-src-elem remove unsafe inline #29

[nicolasauler]

In this PR, I kind of reverted the behaviour of updating only parts of the page and implemented full page refreshes for the captcha widget to be reset.
However, I recently found out in the documentation (https://docs.friendlycaptcha.com/#/widget_api?id=attribute-api-html-tags) that with friendlyChallenge.autoWidget.reset();, the widget can be reset without having to refresh the page.
Maybe alter the behaviour of the app in the future to use that.
But here in the early stages is more whatever.