Required hidden form inputs

Teaches: Some forms require hidden inputs (_token, _ts) that exist only in the rendered HTML.

Expected output: Scrape the form, capture _token and _ts, POST them back with name/email.

Submit your scraper's JSON output to /challenges/static/forms/hidden-fields/grade (grader endpoint is part of a later phase; URL is reserved now).