Add cleanup task for distributed CSRF table

The current persistence runtime adds support for distributed CSRF but doesn't account for the cleanup of the table. Since this is user data, we should clean up any entries older than an hour on some regular schedule to ensure we don't retain private data longer than necessary.