Rework the "contact uploader" mechanism

* add the uploader's secondary email in CC if provided by the user
* remove the option to add the inquirer's specified email address to CC,
  to avoid leaking the email addresses of the uploader
* instead, optionally send a separate confirmation email to the inquirer