v2026.08.04.01 – v2026.08.04.03 — 2026-08-04

• fix(constraints): DB-governor nonneg checks belong to packages, not reseller_plans
• fix(notifications): only alert on sustained resource throttling, not a spike
• fix(dkim): serve the bare TXT value, not rspamadm's BIND zone output
• fix(hardening): heal root-owned subdomains/ container on agent start
• fix(import): detach re-migration paths from the HTTP request context