Reply time setting, and server settings from process.env only

Inquiries and the sent page promise a reply within the site setting
replyTime (2 days, Greg 2026-10-11). The site reads its settings through one
helper that uses process.env only, so a .env file can never be copied into the
built bundle through import.meta.env.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012aSbo2D1qP8cMFQCykf7kx

services/site/src/lib/env.ts

@@ -0,0 +1,12 @@
+/**
+ * Server settings, read from process.env at run time only. Never read secrets
+ * through import.meta.env: Vite replaces it at build time and can copy every
+ * value, secrets included, into the built bundle. Set variables in the
+ * environment (Docker env_file, or the shell when running locally).
+ */
+export function env(key: string): string | undefined;
+export function env(key: string, fallback: string): string;
+export function env(key: string, fallback?: string): string | undefined {
+  const v = process.env[key];
+  return v === undefined || v === "" ? fallback : v;
+}