URGENT: WordPress Plugin - Service Request Form + Private Admin Inbox (24h delivery)

URGENT - delivery within 24 hours of award.
Bid only if you can start right away and stay reachable in Freelancer chat. I will test and give feedback as you go.

I need a small, self-contained WordPress plugin for a home-maintenance service business: a front-end request form and a private request inbox in wp-admin. Keep it lean. This is NOT a CRM. More features will be added later, so the code must be clean and easy to extend.

FEATURES
1. Shortcode form, responsive on mobile and desktop: name, email, phone, service type (dropdown), preferred visit date, message, required privacy consent
2. Spam protection (no reCAPTCHA): nonce, honeypot, server-side validation, max 1 submission per IP per 60 seconds. On error: clear message, nothing stored
3. Each valid request saved exactly once with a reference SR-YYYY-NNNN (e.g. SR-2026-0042)
4. Emails via wp_mail(): acknowledgement to the customer + notification to the office
5. Admin inbox: list of requests (reference, date, name, service, status) with search
6. Detail screen: full request (read-only) and status change: New, Contacted, Booked, Closed

REQUIRED APPROACH
- Private custom post type (public=false, show_in_rest=false, not publicly queryable), administrators only
- Request fields and status stored as post meta
- Inbox uses the standard WordPress admin list screen
- Form posts to admin-post.php and redirects back with a message (no AJAX)
- Native HTML inputs (type="date", type="email"); minimal CSS that inherits the theme
- Service types, office email (default: site admin email) and acknowledgement text defined in ONE config function, so a settings page can be added later
- Organized files and short code comments

MUST PASS
- Installs and activates with no PHP warnings (WP_DEBUG on); PHP 8.1+, latest WordPress
- A valid request is stored once and both emails are triggered
- Invalid or rapid repeat submissions show a useful message and are not stored
- Sanitized input, escaped output, capability checks and nonces on every action
- Subscriber accounts cannot view requests; no public URL, REST or AJAX endpoint exposes request data
- Deactivation keeps all data

DELIVERY
- One milestone, released after I test the items above
- Installable plugin ZIP + source folder
- Short README: install, shortcode, where to change config values

NOT INCLUDED
Settings page, CSV export, internal notes, inbox filters, payments, scheduling, SMS, customer login, CRM sync.

TO APPLY
- Start your proposal with "SR-URGENT"
- Confirm you can start now and give your working hours (with time zone)
- Link to a WordPress plugin you have built
- Your fixed price