Custom Domain Onboarding: Show DNS Records, Copy or Write Them for Customers

Short answer: show the exact SPF, DKIM, and DMARC records first, then let a customer explicitly authorize a write; this keeps onboarding honest when the DNS zone is customer-owned and prevents your intent from drifting away from what the internet publishes. In a property-management product, a domain step is rarely owned by the person who clicked...