Identities for entities did.bot
agent llm did

refactor(infra)!: split the PDS and the website into two roots master

Each root keys its own state in the did.bot account's state bucket, so applying the website cannot lock or roll back the deployment. The delegation between them is one value: `infra/pds/`'s `name_servers` output goes to `infra/site/`'s `pds_zone_name_servers`. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Change-Id: If25943e96e1bf3758fac64581a47854b1a322d92