Add entities, cipher, and alias/DNS log scaffolding

Shipped

April 24, 2026 at 1:50 AM UTC

Author

Kamo

Commit

446a41f

Adds per-org GoDaddy creds (AES-GCM encrypted), an allowRootSubdomains flag and child-org alias collection on the security model, a DNS provisioning audit log, and a shared SecretCipher helper used by SecurityService to round-trip stored API keys without ever returning them to the frontend.