site-engine real-zone test (rev 2)

• Real-zone test: CNAME to Cloudflare for SaaS
• Apex via CNAME flattening