feat: The Other Dude v9.0.1 — full-featured email system

ci: add GitHub Pages deployment workflow for docs site

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

backend/app/services/emergency_kit_service.py

@@ -0,0 +1,54 @@
+"""Emergency Kit PDF template generation.
+
+Generates an Emergency Kit PDF containing the user's email and sign-in URL
+but NOT the Secret Key. The Secret Key placeholder is filled client-side
+so that the server never sees it.
+
+Uses Jinja2 + WeasyPrint following the same pattern as the reports service.
+"""
+
+import asyncio
+from datetime import UTC, datetime
+from pathlib import Path
+
+from jinja2 import Environment, FileSystemLoader
+
+from app.config import settings
+
+TEMPLATE_DIR = Path(__file__).parent.parent.parent / "templates"
+
+
+async def generate_emergency_kit_template(
+    email: str,
+) -> bytes:
+    """Generate Emergency Kit PDF template WITHOUT the Secret Key.
+
+    The Secret Key placeholder will be filled client-side.
+    The server never sees the Secret Key.
+
+    Args:
+        email: The user's email address to display in the PDF.
+
+    Returns:
+        PDF bytes ready for streaming response.
+    """
+    env = Environment(
+        loader=FileSystemLoader(str(TEMPLATE_DIR)),
+        autoescape=True,
+    )
+    template = env.get_template("emergency_kit.html")
+
+    html_content = template.render(
+        email=email,
+        signin_url=settings.APP_BASE_URL,
+        date=datetime.now(UTC).strftime("%Y-%m-%d"),
+        secret_key_placeholder="[Download complete -- your Secret Key will be inserted by your browser]",
+    )
+
+    # Run weasyprint in thread to avoid blocking the event loop
+    from weasyprint import HTML
+
+    pdf_bytes = await asyncio.to_thread(
+        lambda: HTML(string=html_content).write_pdf()
+    )
+    return pdf_bytes