Country Bloom Organics - cleanup notes

Updates applied:
- Updated footer year from 2025 to 2026
- Removed duplicate Cloudflare email decode script
- Updated the visible admin password constant from bloom2025 to bloom2026!
- Added an in-file note near the config block about backend security

Still important:
- The site is still a static front-end build, so API keys and admin logic are still exposed in browser source.
- For true security, move admin actions, email sending, and stock persistence to a backend or serverless functions.
- After deployment, test: admin login, stock save, basket flow, contact form, notify-me form, and order submission.
