Support .onion URL in configuration

With the current tordonate/settings.py file, it's required to correctly set ALLOWED_HOST and CSRF_TRUSTED_URL for Django to function correctly.

These environment variables should support more than one value (currently the clearnet URL), so that we can also allow/trust users to interact with the site via the donate .onion URL.