v1.9.2

Malformed CSRF tokens now produce a clear exception before verification begins. This makes unexpected request data easier to handle without changing the normal token verification flow.

• 576f7e7f Update phpstan/phpstan from 1.8.5 to 1.10.6.
• 6e019dc4 Reject malformed, non-string CSRF tokens with a dedicated exception.
• 6e2af504 Update squizlabs/php_codesniffer from 3.13.5 to 4.0.1.
• 8dfe1e28 Codecov v6.