feat: enable form submission without schema

[RobertBoes]

Summary

• publicKey is now optional on createForm — when omitted, submit() constructs the URL from formId and the API base URL (https://formrelay.app/api/v1/form/{formId})
• New optional botProtection and honeypotField options on createForm, useFormRelay, and both <FormRelay> components for SDK-managed bot protection and honeypot without a schema fetch
• Users who handle bot protection and honeypot manually can omit these options and include the fields directly in form values

Usage

<!-- Full manual form with SDK-managed bot protection -->
<FormRelay
  form-id="contact"
  :bot-protection="{ type: 'turnstile', siteKey: '0x-key' }"
  honeypot-field="_hp_phone"
>
  <template #default="{ values, errors, submit, canSubmit }">
    <form @submit.prevent="submit">
      <input v-model="values.email" type="email" />
      <button :disabled="!canSubmit" type="submit">Send</button>
    </form>
  </template>
</FormRelay>

Test plan

• Core: submitForm accepts SubmitConfig instead of full FormSchema (2 new tests)
• Core: createForm submits without publicKey using constructed URL (3 new tests)
• Core: schema values take precedence over options when both exist
• Vue: composable submits without schema when no publicKey provided
• Vue: canSubmit respects options.botProtection without schema
• Vue: component submits without publicKey
• All 138 tests pass (79 core + 59 vue)
• Build succeeds for all packages