Contacto message form via SMTP (nodemailer)

Client wants a message form in Contacto. Vercel function api/contact.js (nodemailer, smtp.gmail.com) sends to isec_sec@outlook.com. Env vars needed in Vercel project: SMTP_USER (Elazar Workspace address), SMTP_PASS (app password), CONTACT_TO=isec_sec@outlook.com. Supersedes earlier no-form decision on ISEC-3.