fix turnstile public key handling

.gitea/workflows/deploy.yaml

@@ -29,11 +29,10 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
-      - name: Create .env file
-        run: echo "PUBLIC_TURNSTILE_SITEKEY=${{ secrets.TURNSTILE_SITEKEY }}" > .env
-
       - name: Build
         run: pnpm build
+        env:
+          PUBLIC_TURNSTILE_SITEKEY: ${{ secrets.TURNSTILE_SITEKEY }}
 
       - name: Deploy
         uses: cloudflare/wrangler-action@v3

src/components/svelte/ContactForm.svelte

@@ -10,10 +10,7 @@
   let turnstileWidgetId: string | null = $state(null)
   let turnstileContainer: HTMLElement
 
-  // Get Turnstile sitekey from environment variable
-  // Dev: uses test key from .env
-  // Prod: uses real key from Cloudflare Pages env vars
-  const TURNSTILE_SITEKEY = import.meta.env.PUBLIC_TURNSTILE_SITEKEY || '1x00000000000000000000AA'
+  const TURNSTILE_SITEKEY = import.meta.env.PUBLIC_TURNSTILE_SITEKEY
 
   onMount(() => {
     // Wait for Turnstile script to load