Idempotency keys are not optional on a lead-capture form

Any form that triggers a side effect — an email, a CRM record, a Slack notification — needs an idempotency key. It is a small amount of backend work that prevents an entire category of "why did this customer get three emails" support tickets.