Ensure per-row SSL for apex, business.*, and customer.* hosts.

Lock icon probes live TLS and issues only missing certs; toast z-index sits above modals; ssl-sync agent supports blocking wait.

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/super-admin/src/services/domainService.ts

@@ -82,7 +82,7 @@ export async function issueWebsiteSsl() {
   })
 }
 
-/** Issue Let's Encrypt for one storefront domain. */
+/** Ensure SSL for apex + business.* + customer.* (probe, skip if valid, else issue). */
 export async function issueDomainSsl(domainId: number | string) {
   return apiRequest<IssueDomainSslResponse>(`/domains/${domainId}/issue-ssl`, {
     method: 'POST',