Fix data-corruption on PK-less table; scrub real emails from examples

Critical: NocoDB v2 PATCH /records with no primary key updates EVERY row, so a
table missing its Id column made each redeem rewrite all tickets' counts.
- nocodb update() now refuses to PATCH a record with no Id (fail-safe).
- Document that the tickets/audit tables must have an Id PK; note how to add it.
- Replace the real donor email/name used in the /test persona and the
  FluentForms guide with fake placeholders (donor@example.test / <a-real-donor-email>).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

docs/fluentforms-donor-discount.md

@@ -116,8 +116,9 @@ by FluentForms conditional logic based on its value.
 ## Test
 
 ```
-curl "https://scan.beartariacampgrounds.com/api/public/donor-eligibility?key=<SECRET>&email=adam21stevens@gmail.com"
-# -> {"eligible":true,"tier":"member"}
+curl "https://scan.beartariacampgrounds.com/api/public/donor-eligibility?key=<SECRET>&email=<a-real-donor-email>"
+# donor/member -> {"eligible":true,"tier":"member"}
+# anyone else  -> {"eligible":false,"tier":null}
 ```
 
 If member and donor get the **same** discounted price, simplify: set the donor