fix(mail,ci): restore mail hardening, contact env parsing, and ci tag validation

app/actions/contact.ts

@@ -1,6 +1,7 @@
 'use server';
 
 import { sendEmail } from '@/lib/mail/mailer';
+import { env } from '@/lib/env';
 import { render, ContactFormNotification, ConfirmationMessage } from '@mintel/mail';
 import React from 'react';
 import { getServerAppServices } from '@/lib/services/create-services.server';
@@ -86,7 +87,7 @@ export async function sendContactFormAction(formData: FormData) {
     );
 
     if (!isTestSubmission) {
-      logger.info('Sending internal notification', { recipients: config.mail.recipients });
+      logger.info('Sending internal notification', { recipients: env.MAIL_RECIPIENTS });
       const notificationResult = await sendEmail({
         replyTo: email,
         subject: notificationSubject,
@@ -101,14 +102,14 @@ export async function sendContactFormAction(formData: FormData) {
         logger.error('Notification email DELIVERY FAILED', {
           error: notificationResult.error,
           subject: notificationSubject,
-          recipients: config.mail.recipients,
+          recipients: env.MAIL_RECIPIENTS,
         });
         services.errors.captureException(
           new Error(`Notification email failed: ${notificationResult.error}`),
           { 
             action: 'sendContactFormAction_notification', 
             email, 
-            recipients: config.mail.recipients 
+            recipients: env.MAIL_RECIPIENTS 
           },
         );
       }