BRG command / DNS dry run

DNS and final-smoke steps are mapped for the first 20.

This is the Cloudflare handoff before public launch: provider target, custom-domain decision, DNS record template, provider smoke and final-domain smoke. It does not change DNS.