Bump to Django 4.0.1

Requires ponos!323 and architecture!145. Tests will fail until ponos!323 is merged.

---

⚠ Breaking configuration change in dev and in prod:

 csrf:
   trusted_origins:
-    - .arkindex.teklia.com
+    - 'https://*.arkindex.teklia.com'

See https://docs.djangoproject.com/en/4.0/ref/settings/#csrf-trusted-origins