Show per-host SSL ensure results including www.

Avoid treating dashboard-only OK as storefront HTTPS success.

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/super-admin/src/pages/WebsitesPage.tsx

@@ -294,7 +294,7 @@ export function WebsitesPage() {
     })
     setError('')
     showToast(
-      `Checking SSL for ${domain.host}, business.${domain.host}, customer.${domain.host}…`,
+      `Checking SSL for ${domain.host}, www.${domain.host}, business.${domain.host}, customer.${domain.host}…`,
       'info',
     )
 
@@ -310,9 +310,16 @@ export function WebsitesPage() {
         }
       })
       if (result.failed.length > 0) {
-        const detail = result.failed.map((f) => `${f.host}: ${f.error}`).join(' · ')
-        setError(detail)
-        showToast(result.message, result.issued.length > 0 ? 'info' : 'error')
+        setError(result.message)
+        showToast(
+          result.failed.map((f) => f.host).join(', ') + ' need attention',
+          result.issued.length > 0 ? 'info' : 'error',
+        )
+        showToast(result.message, 'info')
+      } else if (!result.sslEnabled) {
+        setError(result.message)
+        showToast('Storefront HTTPS is not valid yet (apex/www).', 'error')
+        showToast(result.message, 'info')
       } else {
         showToast(result.message || `SSL ok for "${domain.host}".`, 'success')
       }

apps/super-admin/src/types/domain.ts

@@ -55,6 +55,7 @@ export interface IssueDomainSslResponse {
   sslEnabled: boolean
   hosts: {
     apex: IssueDomainSslHostResult
+    www: IssueDomainSslHostResult
     business: IssueDomainSslHostResult
     customer: IssueDomainSslHostResult
   }