feat: incident report form, API route, middleware shared-route + redirect

app/report/success/page.tsx

@@ -0,0 +1,30 @@
+export const dynamic = 'force-dynamic'
+
+import Link from 'next/link'
+
+interface Props {
+  searchParams: Promise<{ ref?: string }>
+}
+
+export default async function ReportSuccessPage({ searchParams }: Props) {
+  const { ref } = await searchParams
+  return (
+    <main className="min-h-screen bg-gray-50 flex items-center justify-center px-4">
+      <div className="bg-white rounded-xl shadow-sm p-8 max-w-sm w-full text-center">
+        <div className="text-4xl mb-4">✓</div>
+        <h1 className="text-xl font-bold text-gray-900 mb-2">Report submitted</h1>
+        {ref && (
+          <p className="text-sm text-gray-600 mb-1">
+            Reference: <span className="font-mono font-semibold">{ref}</span>
+          </p>
+        )}
+        <p className="text-sm text-gray-500 mb-6">
+          The supervisor and HSE officer have been notified.
+        </p>
+        <Link href="/report" className="text-sm text-blue-600 hover:underline">
+          Submit another report
+        </Link>
+      </div>
+    </main>
+  )
+}