Adds Google reCAPTCHA v3 support as spam protection infrastructure for future forms (feedback form #316, email forms, etc.).

Service Layer

• IReCaptchaService / ReCaptchaService in PC2/Services/ — verifies tokens against Google's API via IHttpClientFactory, validates v3 score against configurable threshold (default 0.5), logs all failure paths

Configuration

• GoogleReCaptcha:SiteKey, SecretKey, MinimumScore added to appsettings.json with placeholder values; secrets go in user secrets / Azure App Settings
• AddHttpClient() + IReCaptchaService registered in Program.cs

Client-Side Partial

• Views/Shared/_ReCaptchaScriptsPartial.cshtml — loads reCAPTCHA v3 script, exposes getReCaptchaToken(action) JS helper; renders nothing if SiteKey is unconfigured

<!-- Include in any view that needs reCAPTCHA -->
<partial name="_ReCaptchaScriptsPartial" />

// On form submit
const token = await getReCaptchaToken('contact');
// POST token with form; server calls IReCaptchaService.VerifyAsync(token)

Tests & Docs

• Config tests for all three GoogleReCaptcha keys
• README section with dotnet user-secrets setup steps for local dev

• Fixes Add Google reCAPTCHA #379

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.