{{-- Google reCAPTCHA, rendered only when keys are configured — local and staging environments submit the public forms without one. The honeypot and timing checks apply either way; server-side validation is never skipped. --}} @if (config('services.recaptcha.enabled'))