Chore: environment variable support and security updates

feat: store permanent thewall URL in sheet, proxy serves from HF

feat: try PHP permanent storage first, fall back to HF local

revert: restore working server-side photo save, name file by ID

fix: pure-integer filter prevents timestamps being parsed as IDs

fix: browser uploads photo directly to PHP, server just stores the returned URL

fix: pass ID to photo upload, drop groupAffiliation from escort

fix: use max numeric ID instead of row count to prevent gaps from misaligned rows

fix: add User-Agent/Referer to photo upload, add auto-increment ID to all rows

feat: route photo uploads to external PHP endpoint via PHOTO_UPLOAD_ENDPOINT env var

fix: move vetPhotoUrl to end of Honor row to prevent column offset

feat: base64 photo upload to temp storage + fix phone validation

fix: honor form failing validation due to non-standard field names

fix: add selectors for tours and honor forms in integration script

Update API to parse and store raw exact dynamic form fields by origin sheet

Route form submissions to specific Google Sheet tabs based on origin URL

Add Basic Auth middleware to protect UI

Update index to display all 4 live forms in a grid

Deploy extracted standalone HTML forms

Enhance dynamic integration script to map any form fields.

Add Live Site integration, Phone/Subject fields, and origin tracking

Deploy WallAPI: Express server, Google Sheets API, and Socket.IO

initial commit