Owns the per-bank Cloudflare CNAME record that points a bank's dashboard host
at the base distribution host. There is no wildcard record behind it, so a
bank whose record is missing does not resolve; re-saving the bank writes it.
ensure/remove are idempotent — safe to re-run on a re-save.
Owns the per-bank Cloudflare CNAME record that points a bank's dashboard host at the base distribution host. There is no wildcard record behind it, so a bank whose record is missing does not resolve; re-saving the bank writes it.
ensure/removeare idempotent — safe to re-run on a re-save.