5.12.2: bootstrap:aws checks a domain against public DNS

pnpm bootstrap:aws now waits for a domain using Cloudflare's and Google's public DNS, so a stale answer cached by the local network can't hold the run for 30 minutes, and it says what the domain resolves to while it waits. The app itself is unchanged from 5.12.0.

🐛 Fixed

• pnpm bootstrap:aws checks a domain against public DNS. It asked the local network's resolver, which on the first run with a domain had cached "doesn't exist" from before the record was added; Cloudflare's negative TTL keeps that for 30 minutes, so the run sat waiting with the record already correct. It asks 1.1.1.1 and 8.8.8.8 directly now, as Let's Encrypt does, and continues within about 10 seconds of the record being right. While it waits, it says whether the domain is not found yet or which IP it points at