26-Jul-2026 — protect open Brevo reads and fill contact-us merge fields ref #317

build 795 — commit 3cf8799

What's new

Brevo admin read routes require a signed-in session again. They were left open when the forgot-password flow was moved to the backend (ref #157). Contact Us mail receives the same account address merge fields as other transactional mail. The walk map editor no longer holds unused mail and system config subscriptions.

At a glance

• Brevo folders, contacts, lists, templates and account reads need a signed-in session
• Contact Us emails get street, town and postcode account merge fields
• Map edit drops unused mail and system config subscriptions