Implement two-layer CAPTCHA bypass

src/hooks/useCaptchaBypass.ts

@@ -0,0 +1,34 @@
+import { useEffect } from 'react';
+import { useAdminSettings } from './useAdminSettings';
+
+export function useCaptchaBypass() {
+  const { getSettingValue } = useAdminSettings();
+  
+  // Layer 1: Check if environment allows bypass
+  const environmentAllowsBypass = import.meta.env.VITE_ALLOW_CAPTCHA_BYPASS === 'true';
+  
+  // Layer 2: Check if admin has enabled bypass
+  const adminEnabledBypass = getSettingValue('auth.captcha_bypass_enabled', false) === true || 
+                             getSettingValue('auth.captcha_bypass_enabled', false) === 'true';
+  
+  // Both layers must allow bypass
+  const bypassEnabled = environmentAllowsBypass && adminEnabledBypass;
+  
+  // Log warning if bypass is active
+  useEffect(() => {
+    if (bypassEnabled && typeof window !== 'undefined') {
+      console.warn(
+        '⚠️ CAPTCHA BYPASS IS ACTIVE\n' +
+        'This should only be enabled in development/preview environments.\n' +
+        'Verify VITE_ALLOW_CAPTCHA_BYPASS=false in production!'
+      );
+    }
+  }, [bypassEnabled]);
+  
+  return {
+    bypassEnabled,
+    requireCaptcha: !bypassEnabled,
+    environmentAllowsBypass,
+    adminEnabledBypass
+  };
+}