Form endpoint

POST name, email, message (optional subject).

Include a hidden honeypot field named website.