Security hardening: env-based config, CSRF protection, secure code generation, plus presenter management and email communications system

- Move all credentials from hardcoded to .env with python-dotenv (add .env.example template and .gitignore)
- Add CSRF token generation and validation on all state-changing requests
- Replace random.choices with secrets.choice for all secure code generation
- Add session cookie security headers (HttpOnly, Secure, SameSite)
- Add presenter management: assign/remove presenters to breakout sessions, presenter QR scanning
- Add email communications system: templates per event, custom email sending, sent email tracking
- Add staff/organizer profile pages with staff code display
- New DB tables: event_email_templates, sent_emails, user_communications
- New DB columns: staff.reminder_count/reminder_dates, breakout_session_organizers.presenter_code
- Expand English translation strings across all new features

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

templates/attendee/dashboard.html

@@ -3,14 +3,7 @@
 {% block title %}{{ 'attendee_dashboard'|t }} - NetEvents{% endblock %}
 
 {% block content %}
-<style>
-.dashboard {
-    padding: 30px 20px;
-    max-width: 1600px;
-    margin: 0 auto;
-}
-</style>
-<div class="dashboard">
+<div class="attendee-dashboard">
     <h1>{{ 'attendee_dashboard'|t }}</h1>
 
     {% if event %}
@@ -26,10 +19,10 @@
                 <div class="event-card-actions">
                     <a href="{{ url_for('register_event', code=event.code) }}" class="btn btn-outline">{{ 'event_details'|t }}</a>
                     <a href="{{ url_for('attendee_breakout_sessions') }}" class="btn btn-outline">{{ 'breakout_sessions'|t }}</a>
-                    <a href="{{ url_for('attendee_scan') }}" class="btn btn-primary">📷 {{ 'scan_qr_to_connect'|t }}</a>
-                    <a href="{{ url_for('download_badge') }}" class="btn btn-outline">📄 {{ 'download_badge'|t }}</a>
-                    <form method="POST" action="{{ url_for('email_badge') }}" style="display: inline;">
-                        <button type="submit" class="btn btn-outline">📧 {{ 'email_badge'|t }}</button>
+                    <a href="{{ url_for('attendee_scan') }}" class="btn btn-primary"><i data-lucide="scan-line"></i> {{ 'scan_qr_to_connect'|t }}</a>
+                    <a href="{{ url_for('download_badge') }}" class="btn btn-outline"><i data-lucide="file-down"></i> {{ 'download_badge'|t }}</a>
+                    <form method="POST" action="{{ url_for('email_badge') }}" class="d-inline">
+                        <button type="submit" class="btn btn-outline"><i data-lucide="mail"></i> {{ 'email_badge'|t }}</button>
                     </form>
                 </div>
             </div>
@@ -53,8 +46,8 @@
             <div class="connections-grid">
                 {% for conn in connections %}
                     <div class="connection-card">
-                        <h4 style="margin-bottom: 12px;">{{ conn.first_name }} {{ conn.last_name }}</h4>
-                        <p class="connection-org" style="margin-bottom: 12px;">{{ conn.organisation if conn.organisation else '' }}</p>
+                        <h4 class="mb-3"><span class="first-name">{{ conn.first_name }}</span> <span class="last-name">{{ conn.last_name }}</span></h4>
+                        <p class="connection-org mb-3">{{ conn.organisation if conn.organisation else '' }}</p>
                         <p class="connection-role">{{ conn.role if conn.role else '' }}</p>
                     </div>
                 {% endfor %}
@@ -77,9 +70,9 @@
                         <div class="apt-info">
                             <p><strong>
                                 {% if apt.requester_id == session.user_id %}
-                                    {{ 'with'|t }} {{ apt.target_first_name }} {{ apt.target_last_name }}
+                                    {{ 'with'|t }} <span class="first-name">{{ apt.target_first_name }}</span> <span class="last-name">{{ apt.target_last_name }}</span>
                                 {% else %}
-                                    {{ 'with'|t }} {{ apt.requester_first_name }} {{ apt.requester_last_name }}
+                                    {{ 'with'|t }} <span class="first-name">{{ apt.requester_first_name }}</span> <span class="last-name">{{ apt.requester_last_name }}</span>
                                 {% endif %}
                             </strong></p>
                             <p><strong>{{ 'time'|t }}:</strong> {{ apt.appointment_time|localized_date if apt.appointment_time else 'TBD' }}</p>
@@ -106,4 +99,4 @@
         {% endif %}
     </section>
 </div>
-{% endblock %}
+{% endblock %}