fix(site): remove phishing-like mail redirects

[ilyar]

Summary

• replace direct Gmail compose links with internal contact anchors and a standard mailto link
• remove the external mail.google.com redirect from the production JS bundle
• make the deploy VirusTotal job fail when malicious or suspicious detections are present

VirusTotal context

Latest deploy re-analysis for https://ever-guild.net/ reported malicious=4, suspicious=0. Flagged engines: ADMINUSLabs, Chong Lua Dao, CRDF, CyRadar. CyRadar labeled the URL as phishing. Direct Gmail compose links are the most phishing-like element in the rendered app, so this removes them and keeps contact on-domain/standard.

Validation

• npm run lint
• npm run acceptance:test
• npm run lighthouse
• verified production build no longer contains mail.google.com