Add nav/footer, contact form, privacy/terms drafts, first course landing page

- baseof.html: proper header/nav/footer, CSS custom properties for
  light/dark, button and form component styles — no external theme
  dependency, avoiding the submodule/version churn from the earlier
  PaperMod attempt.
- Contact page: real form (honeypot spam protection) posting to the eec
  service's new /contact endpoint, replacing the plain mailto CTA.
- Privacy Policy and Terms drafts — grounded in what's actually true here
  (self-hosted mail/course infra, no third-party trackers), flagged as
  drafts pending review.
- courses/ section with a generic single template driven by front matter
  (eec_slug, pitch) and the first course, Find Your Right Readers —
  landing page only; the actual course content isn't authored in
  eec-courses yet, so enrolling will 404 until that's written.
- Fixed hugo.toml baseURL (was www.reground.org, but Caddy's canonical
  host is the bare domain — www redirects to it, not the other way).

content/privacy.md

@@ -0,0 +1,64 @@
+---
+title: "Privacy Policy"
+description: "How ReGround collects, uses, and protects your information."
+---
+
+_Last updated: July 2026_
+
+**This is a draft.** It hasn't been reviewed by a lawyer. Review before treating it as final.
+
+This policy explains what information ReGround ("I," "me") collects through
+reground.org and its related email courses, and what happens to it.
+
+## What I collect
+
+- **Contact form**: the name, email address, and message you submit.
+- **Email courses**: the email address you sign up with, and which step of
+  a course you've reached (so the course can be delivered at your pace).
+- **Newsletter list**: if you opt in at the end of a course (or by another
+  explicit signup), your email address and name, if given.
+
+I don't use third-party analytics, ad trackers, or tracking pixels on this
+site. Email delivery, the course system, and the mailing list all run on
+infrastructure I operate myself — nothing is handed to a third-party
+marketing platform.
+
+## Why I collect it
+
+- To respond to messages sent through the contact form.
+- To deliver the email course(s) you sign up for.
+- To send periodic updates to people who've explicitly opted in — never
+  as a side effect of using the contact form or taking a course.
+
+## What I don't do
+
+- I don't sell or rent your information to anyone.
+- I don't share it with third parties except the infrastructure providers
+  necessary to run this site and send email (e.g. the hosting provider and
+  its network) — none of whom get to use it for their own purposes.
+
+## Your control over it
+
+- **Unsubscribe**: every newsletter email includes an unsubscribe link.
+  Clicking it removes you from that list immediately.
+- **Email courses**: courses are self-paced with no ongoing subscription —
+  once you've received the emails, there's nothing further to opt out of
+  unless you also joined the newsletter list.
+- **Deletion**: email me at [hello@reground.org](mailto:hello@reground.org)
+  and I'll delete your information from these systems.
+
+## Security
+
+Your information is stored on infrastructure I control directly, not
+handed off to third-party SaaS platforms. That doesn't make it invulnerable
+— no system is — but it does mean there's exactly one place your data
+lives, and one person accountable for it.
+
+## Changes
+
+If this policy changes in a way that matters, I'll update the date at the
+top of this page.
+
+## Questions
+
+[hello@reground.org](mailto:hello@reground.org)