v1.3.8: verified custom domains keep serving through DNS lookup blips (in-pass recheck + 30 min grace), fail-closed 503s logged as one summary line per site and reason, hourly OAuth cleanup logs only when it deletes something