[IMP] payment: provide the access token to the assign route

to be able to safely check the user is allowed to modify the specified
portal record.

Part-of: odoo/odoo#94020

addons/payment/static/src/js/manage_form.js

@@ -53,6 +53,7 @@ odoo.define('payment.manage_form', require => {
             this._rpc({
                 route: this.txContext.assignTokenRoute,
                 params: {
+                    'access_token': this.txContext.accessToken,
                     'token_id': tokenId,
                     'csrf_token': core.csrf_token,
                 }