fix: explicitly load Cloudflare Turnstile

Jenkinsfile

@@ -334,13 +334,6 @@ stage('SonarQube Quality Gate') {
 
             steps {
                 sh '''
-                    set -a
-                    . /opt/furious-ducks/secrets/tiptop-mail.env
-                    set +a
-
-                    test -n "${TURNSTILE_SITE_KEY}"
-                    echo "Turnstile site key chargée (longueur: ${#TURNSTILE_SITE_KEY})"
-
                     docker build \
                       -t "${BACKEND_IMAGE}:${IMAGE_TAG}" \
                       backend

frontend/src/components/Captcha.jsx

@@ -1,5 +1,5 @@
 import { useEffect, useRef } from 'react'
-import { CAPTCHA_ENABLED, TURNSTILE_SITE_KEY } from '../config/captcha'
+import { TURNSTILE_SITE_KEY } from '../config/captcha'
 
 const TURNSTILE_SCRIPT_ID = 'cf-turnstile-script'
 const TURNSTILE_SCRIPT_URL =
@@ -10,9 +10,7 @@ export default function Captcha({ onToken }) {
   const widgetIdRef = useRef(null)
 
   useEffect(() => {
-    if (!CAPTCHA_ENABLED || !TURNSTILE_SITE_KEY || !containerRef.current) {
-      return
-    }
+    if (!TURNSTILE_SITE_KEY || !containerRef.current) return
 
     let cancelled = false
 
@@ -29,7 +27,7 @@ export default function Captcha({ onToken }) {
         try {
           window.turnstile.remove(widgetIdRef.current)
         } catch {
-          // Widget déjà supprimé
+          // Rien à faire
         }
 
         widgetIdRef.current = null
@@ -43,7 +41,6 @@ export default function Captcha({ onToken }) {
           sitekey: TURNSTILE_SITE_KEY,
           language: 'fr',
           size: 'flexible',
-          appearance: 'always',
 
           callback: (token) => {
             onToken(token)
@@ -69,28 +66,23 @@ export default function Captcha({ onToken }) {
       return
     }
 
-    if (existingScript) {
-      existingScript.addEventListener('load', renderWidget, {
-        once: true,
-      })
+    const previousCallback = window.onloadTurnstileCallback
 
-      return () => {
-        cancelled = true
-      }
+    window.onloadTurnstileCallback = () => {
+      previousCallback?.()
+      renderWidget()
     }
 
+    if (!existingScript) {
       const script = document.createElement('script')
 
       script.id = TURNSTILE_SCRIPT_ID
-    script.src = TURNSTILE_SCRIPT_URL
+      script.src = `${TURNSTILE_SCRIPT_URL}&onload=onloadTurnstileCallback`
       script.async = true
       script.defer = true
 
-    script.addEventListener('load', renderWidget, {
-      once: true,
-    })
-
       document.head.appendChild(script)
+    }
 
     return () => {
       cancelled = true
@@ -102,7 +94,7 @@ export default function Captcha({ onToken }) {
         try {
           window.turnstile.remove(widgetIdRef.current)
         } catch {
-          // Widget déjà supprimé
+          // Rien à faire
         }
       }
 
@@ -110,9 +102,7 @@ export default function Captcha({ onToken }) {
     }
   }, [onToken])
 
-  if (!CAPTCHA_ENABLED || !TURNSTILE_SITE_KEY) {
-    return null
-  }
+  if (!TURNSTILE_SITE_KEY) return null
 
   return (
     <div