MVP UI for direct and open challenges. Backend records use `challenge_requests` and `open_challenges`.
This form is protected and ready for Supabase wiring.