Rejected DNS Record Write: 4 Zone Identity Checks for Tenant Domains

TL;DR: Treat a DNS zone identifier as an opaque control-plane key, never as a domain name, and keep...