fix: add CSRF token to get_collectible_item_id request

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "rbx-upload"
-version = "0.2.3"
+version = "0.2.4"
 description = "Roblox asset upload client"
 requires-python = ">=3.13"
 dependencies = [

src/rbx_upload/client.py

@@ -291,9 +291,11 @@ class RobloxClient:
 
     async def get_collectible_item_id(self, asset_id: int) -> str | None:
         """Look up the collectible item ID (UUID) for a given asset ID."""
+        csrf = await self._get_csrf_token()
         response = await self._http.post(
             self._proxy_url("https://catalog.roblox.com/v1/catalog/items/details"),
             json={"items": [{"itemType": "Asset", "id": asset_id}]},
+            headers={"X-CSRF-TOKEN": csrf},
             cookies=self._csrf_cookies,
         )
         response.raise_for_status()