Contact form spam finally stopped

Automated bots that could execute page scripts were slipping past the existing honeypot, timing, and token checks, resulting in every submission since May being spam. The form now also validates request origin and checks for suspicious link content, closing that gap. An old, unprotected version of the contact form has also been removed.

UK and Mexico emails now sent from the right region

Regional email sending was misconfigured so the UK region was silently using the US email account and address, and the Mexico region's address wasn't recognized at all. All regions now send from their correct, dedicated domains.