DMARC record and policy examples that move safely to enforcement

Start with monitoring, fix SPF and DKIM alignment, then move through quarantine before reject.