P1: Use correct Queue North logo — placeholder SVG needs replacement
P1: Not all images loading — missing logo and asset references
P1: Use correct Queue North logo — placeholder SVG needs replacement
P3: HTML5 required attribute conflicts with custom form validation
P2: express.json() middleware runs on all requests including GET
P2: No retry logic for transient API failures in frontend
P2: Zoho payload field names may not match Zoho CRM schema
P3: No input debouncing on Contact/Support forms
P3: No caching strategy for API GET requests
P2: CSP allows unsafe-inline for styles — weakens XSS protection
P2: RATE_LIMIT_PER_MINUTE env var NaN on invalid input — rate limiting silently disabled
P1: Header CTA button uses plain Link instead of Button component
P1: No unique constraint on email field — duplicate leads possible
P1: Header SheetTrigger imported without Sheet wrapper — mobile nav may be broken
P1: Zoho URL double-slash if ZOHO_API_DOMAIN has trailing slash
P1: Frontend api.js does not handle CORS errors — generic error message shown
P0: Zoho token fetch does not check response.ok before parsing JSON
P0: su-exec in Docker entrypoint may fail silently — container runs as root
P1: No timeout on Zoho token fetch — server hangs if Zoho is down