Two deploy-failure UX fixes plus wiring for the deployer-vantage DNS gate:

- deployFailureSummary mislabeled a public-endpoint DNS failure as
  "Submitting the Acurast job": the canonical ingress hostname literally
  contains "acurast" (e-...acurast.ingress.digital), which matched the
  broad acurast catch-all. Add an explicit public-endpoint / dns_failed /
  getaddrinfo / ENOTFOUND branch ahead of that catch-all so the stage
  reads "Verifying the public endpoint".

- Set confirmPublicDnsResolution on the launch-demo and deploy workflow
  inputs for real public deploys (off when --allow-local-relay), enabling
  the workflows DNS gate to confirm the canonical hostname resolves from
  the deployer before declaring DNS ready.

Bumps @proof-computer/switchboard-workflows to 0.1.4.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>