Function epl_process_contact_capture_request

Validate and persist a contact-capture request.

Shared by the AJAX handler and the form builder callback so direct form POSTs run through the same validation. This is a public lead-capture feature, so it does not require authorization; abuse is bounded by the nonce (CSRF), the honeypot, input sanitization, and a per-IP rate limit on anonymous requests.