Fix storefront SSL probes and per-domain ensure for dashboards.

Skip redundant provision on edit, harden TLS hostname checks, and issue apex/business/customer SSL from one endpoint.

Co-authored-by: Cursor <cursoragent@cursor.com>

src/domain-admin/domain-admin.controller.ts

@@ -51,6 +51,7 @@ export class DomainAdminController {
     return this.service.deploy(domainId, user);
   }
 
+  /** Issue / renew Let's Encrypt for one domain: apex + business.* + customer.*. */
   @Post(':domainId/issue-ssl')
   @HttpCode(200)
   @UseGuards(JwtAuthGuard)