Cornerstone email authentication: DMARC, DKIM, and SPF setup

Configure tenant-specific SPF, account-managed DKIM, aligned domains, and staged DMARC enforcement.