This update removes direct Supabase client-side writes for newsletter and community signups, moving them to a secure /api/lead endpoint. This implementation adds a honeypot field to mitigate spam, enforces double opt-in via Kit, and introduces a dedicated thank-you page to handle post-confirmation states appropriately. By centralizing this logic, we improve both security and user communication regarding subscription status.