Contact
TODO: add a real contact email and, if you want an actual working form here instead of a mailto link, wire it to a Next.js API route + email service (e.g. Resend) — a form that only fakes success client-side (like the one on /disclosure right now) shouldn't ship to real visitors.