Owns the per-bank Cloudflare CNAME record that points a bank's dashboard host
at the base distribution host. Runtime companion to the SST-managed base
records; the *.cfx.to wildcard is retained (Phase 1) so a missed record is
non-fatal. ensure/remove are idempotent — safe to re-run on a re-save.
Owns the per-bank Cloudflare CNAME record that points a bank's dashboard host at the base distribution host. Runtime companion to the SST-managed base records; the
*.cfx.towildcard is retained (Phase 1) so a missed record is non-fatal.ensure/removeare idempotent — safe to re-run on a re-save.