Convert hotel landing to React + Tailwind v4 with amoCRM lead capture

Ports the single-file ЭкзоОтель page to the same architecture as the fitness
landing: Vite + React 19 + TypeScript + Tailwind v4 on the client, Express 5 for
the /api/leads/hotels endpoint, zod schema shared between the two.

The original page is kept in legacy/index.html as the visual reference. Its 15
inlined base64 images are extracted to files (the 1 MB HTML becomes ~318 KB of
JS plus assets loaded on demand), and its text is reproduced line for line —
verified with an innerText diff. Section heights stay within 0.6% at 375 and
1440 px; the drift comes from Inter actually loading, which the original asked
for but never served.

Three deliberate departures, documented in the README:
  * eyebrow and lead in the CTA block were dark teal on navy (3.4:1); they now
    match the other dark sections
  * hero fact values overflowed their 80px column into the label below 430px
  * "2025–2026г.." typo in the market source note

Leads reuse the fitness amoCRM integration: contact lookup by phone in every
spelling, deal in the first stage of pipeline 10980758, account fields matched
automatically with the rest written to a note. Rate limit, honeypot, and a
localStorage fallback so a lead survives the CRM being down. Vite runs on 5174
and the API on 3001 so both landings can run at once.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

hotel/server/src/rate-limit.ts

@@ -0,0 +1,33 @@
+interface Bucket {
+  count: number
+  resetAt: number
+}
+
+/**
+ * Minimal fixed-window limiter for the public lead endpoint. In-memory on
+ * purpose: a single landing page behind one Node process does not warrant a
+ * shared store, and losing the counters on restart is harmless.
+ */
+export function createRateLimiter(options: { limit: number; windowMs: number }) {
+  const buckets = new Map<string, Bucket>()
+
+  return function check(key: string): { allowed: boolean; retryAfterSeconds: number } {
+    const now = Date.now()
+
+    if (buckets.size > 5000) {
+      for (const [k, bucket] of buckets) if (bucket.resetAt <= now) buckets.delete(k)
+    }
+
+    const bucket = buckets.get(key)
+    if (!bucket || bucket.resetAt <= now) {
+      buckets.set(key, { count: 1, resetAt: now + options.windowMs })
+      return { allowed: true, retryAfterSeconds: 0 }
+    }
+
+    bucket.count += 1
+    return {
+      allowed: bucket.count <= options.limit,
+      retryAfterSeconds: Math.ceil((bucket.resetAt - now) / 1000),
+    }
+  }
+}