DNS delegation diagnostics

Publishes DNS delegation and cutover guidance across Cursor 1.0.18, Codex 1.0.14, and Claude Code 1.0.8. Endpoint-health flows now use dns_lookup with NS and CNAME records and require current-turn NS evidence before confirming delegation.