laminas/laminas-captcha 2.3.6

Based on https://github.com/zendframework/zend-captcha/releases/tag/release-2.3.6 (commit 1209c92e2a36b3614df93466429913e858ac60b3 in this repo)

SECURITY UPDATES
----------------

- **ZF2015-03** `Laminas\Validator\Csrf` was incorrectly testing null or
  improperly formatted token identifiers, allowing them to pass validation. This
  release provides patches to correct the behavior. If you use the validator, or
  the corresponding `Laminas\Form\Element\Csrf`, we recommend upgrading
  immediately.