Split compose dev/prod and relax contact form friction.

Use compose.dev.yaml and compose.prod.yaml with fixed Go cache mounts, block sudo make dev, build Air outside app/tmp for rootless Docker, soften English spam checks, and simplify contact error copy.

Co-authored-by: Cursor <cursoragent@cursor.com>

compose.dev.yaml

@@ -0,0 +1,24 @@
+# Local development: live reload, source mount, host Go caches.
+# Run: make dev
+
+services:
+  dev:
+    build:
+      context: .
+      dockerfile: Dockerfile.dev
+    container_name: technicalkiwi-dev
+    ports:
+      - "7331:7331"   # templ proxy — use http://localhost:7331 in the browser
+      - "8080:8080"   # app direct (no auto-reload)
+    volumes:
+      - ./app:/app
+      - ./upload:/upload
+      - ${HOST_GOMODCACHE}:/go/pkg/mod
+      - ${HOST_GOCACHE}:/root/.cache/go-build
+    env_file:
+      - .env
+    environment:
+      ADDR: ":8080"
+      GOMODCACHE: /go/pkg/mod
+      GOCACHE: /root/.cache/go-build
+    working_dir: /app