Codebase audit: remove dead code, fix broken patterns, consolidate duplicates; v2.0.27

- Remove unused prop-types dep, deprecated useOutboundLinkTracking export
- Fix missing linkClicks key in analyticsEvents initial state (B-01)
- Export ADMIN_SESSION_COOKIE from auth.js; remove local copy in admin-auth.js (D-02)
- Remove cookieFlags() wrapper in auth.js and study-helpers.js; use cookieSecureFlag() directly (U-04)
- Remove ADMIN_SESSION_TTL_MS duplicate from config.js (D-01)
- Remove DEFAULT_SEO/DEFAULT_LEGAL/DEFAULT_REDIRECT_RULES/DEFAULT_PODCAST_FEATURED_LINKS/DEFAULT_PUBLISH_STATE
  duplicates from config.js; re-export from helpers.js (D-04, fixes sitemapPaths divergence)
- Fix email.js hardcoded fallback strings to use DEFAULT_RESEND_TO/DEFAULT_RESEND_REPLY_TO (M-02)
- Remove duplicate normalizeIp, isPrivateOrLocalIp, normalizeRedirectPath, sanitizeUrl,
  sanitizeRedirectRules bodies from study-helpers.js; re-export from helpers.js (D-03)
- Fix pruneStatsByDays to import VISITOR_RETENTION_DAYS_DEFAULT from config.js (B-02)
- Fix createTitusDownloadToken to use DOWNLOAD_TOKEN_TTL_MS constant (B-03)
- Remove normalizeMessageType duplicate from study-helpers.js (U-03/D-08)
- Remove dead wantsWelcome variable in contact.js; use shouldSendWelcome (B-04)
- Replace dynamic imports in contact.js with static imports (B-07)
- Remove dead wantsWelcome=true in study-auth.js (B-05)
- Merge duplicate import blocks in analytics.js and public.js (D-05, D-06)
- Replace dynamic readFile re-import in nuggets-host-upload.js (B-06)
- Replace hardcoded SITE_URL fallbacks with getCanonicalBaseUrl() (M-06)
- Replace raw resend.emails.send in study-account.js with sendResendEmailWithRetry (M-01)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

server/config.js

@@ -5,6 +5,7 @@ import { validateAdminPasswordSetup } from './auth.js'
 import { ROOT_DIR, DATA_DIR } from './paths.js'
 
 export { ROOT_DIR, DATA_DIR }
+export { DEFAULT_SEO, DEFAULT_LEGAL, DEFAULT_REDIRECT_RULES, DEFAULT_PODCAST_FEATURED_LINKS, DEFAULT_PUBLISH_STATE } from './helpers.js'
 
 function readPackageVersion() {
   try {
@@ -103,7 +104,6 @@ export const MAX_RECENT_VISITS = 1000
 export const VISITOR_RETENTION_DAYS_DEFAULT = 180
 export const BACKUP_RETENTION_DAYS = 30
 export const BACKUP_INTERVAL_MS = 24 * 60 * 60 * 1000
-export const ADMIN_SESSION_TTL_MS = 7 * 24 * 60 * 60 * 1000
 
 export const MAX_CONTACT_SUBMISSIONS = 5000
 export const CONTACT_EMAIL_COOLDOWN_MS = Math.max(10 * 1000, Number(process.env.CONTACT_EMAIL_COOLDOWN_MS ?? 60 * 1000) || 60 * 1000)
@@ -132,58 +132,6 @@ export const NATE_RESEND_FROM = 'Verse by Verse with Nate <nate@versebyversewith
 // Addresses an admin may send a reply from — must stay in sync with the <select> options in src/AdminPage.tsx.
 export const ADMIN_REPLY_FROM_OPTIONS = [DEFAULT_RESEND_FROM, NATE_RESEND_FROM]
 
-export const DEFAULT_SEO = {
-  title: 'Verse by Verse with Nate',
-  description: 'Verse by Verse with Nate explores Scripture one verse at a time with practical Bible teaching.',
-  ogTitle: 'Verse by Verse with Nate',
-  ogDescription: 'A Journey Through Scripture - verse by verse, nugget by nugget.',
-  ogImage: '/images/podcast-art.jpeg',
-  canonicalUrl: 'https://versebyversewithnate.us/',
-  robotsPolicy: 'index,follow',
-  sitemapPaths: ['/', '/start-here', '/questions', '/privacy', '/terms'],
-}
-
-export const DEFAULT_LEGAL = {
-  privacyTitle: 'Privacy Policy',
-  privacyBody: [
-    'We respect your privacy and collect limited data to operate and improve this site.',
-    'If you consent to analytics cookies, we may store masked IP-based location signals and returning visitor activity.',
-    'Contact form details are used only to respond to your message and ministry communication requests.',
-  ],
-  termsTitle: 'Terms',
-  termsBody: [
-    'Content on this site is for informational and ministry purposes.',
-    'External links are provided for convenience and are subject to third-party policies.',
-    'By using this site, you agree to lawful use and respectful communication.',
-  ],
-}
-export const DEFAULT_PODCAST_FEATURED_LINKS = []
-export const DEFAULT_PUBLISH_STATE = {
-  draftUpdatedAt: null,
-  publishedAt: null,
-}
-
-export const DEFAULT_REDIRECT_RULES = [
-  {
-    id: 'spotify',
-    path: '/spotify',
-    target: 'https://open.spotify.com/show/0Gq1TzoJOdReSZ1gYQi8Xl',
-    statusCode: 301,
-  },
-  {
-    id: 'apple',
-    path: '/apple',
-    target: 'https://podcasts.apple.com/search?term=Verse+by+Verse+with+Nate',
-    statusCode: 301,
-  },
-  {
-    id: 'amazon',
-    path: '/amazon',
-    target: 'https://music.amazon.com/podcasts/202322bf-db86-4e7d-9a6b-4db7cbccbccf/verse-by-verse-with-nate',
-    statusCode: 301,
-  },
-]
-
 export const DEFAULT_REPLY_TEMPLATES = [
   {
     id: 'thanks-for-reaching-out',