v4.4.6 - Timeline + hero with-form CTAs + contact form diagnostics

Bug Fixes

• Timeline block: Fixed View [cms.blocks.partials.timeline-content] not found error in plugin-mode installs. The block's @include calls were missing the tallcms:: namespace prefix, so partial views resolved only on standalone installs (which have a copy under the default namespace) and failed everywhere else.
• Hero block (with-form layout): Primary and secondary CTA buttons now render alongside the form card. Previously they were hidden in this layout on the assumption that the form submit was the sole CTA, but real-world heroes often want both — e.g. lead-capture form plus a WhatsApp or live-demo button. Applied to both the default hero view and the Elevate theme variant.

Operability

• Contact form rejections: The "Contact form submission with invalid signature" warning now logs non-sensitive fingerprints (config hash + signature prefixes) so operators can tell whether multiple rejected requests share the same payload — distinguishing intermittent tampering from systemic mismatches like APP_KEY rotation or stale page-cache.