- Add cloudflare site/secret key validation for captcha enabled check - Fix forward create to use UpdateService with tolerateExists for idempotent sync - Introduce isAlreadyExistsMessage helper excluding address-in-use errors - Add contract tests for forward toggle, address-in-use rollback, captcha compatibility