How to Diagnose DKIM Failures After an NS Migration

For anyone whose email is getting through after an NS migration but failing DKIM, this post explains how we found the cause by comparing the old and new DNS records, then confirmed it with a test email.