Fix subdomain DNS messaging for Ladill nameservers and retire pending-setup primaries.

Treat ns_auto domains as managed DNS, publish subdomain A records via PowerDNS without failing the UX when the local DNS registry is missing, and promote real linked domains over pending-setup.local placeholders.

Co-authored-by: Cursor <cursoragent@cursor.com>

app/Jobs/ProvisionHostingSslJob.php

@@ -76,6 +76,13 @@ class ProvisionHostingSslJob implements ShouldQueue
                 'ssl_expires_at' => now()->addDays(90),
             ]);
 
+            if ($site->domain_id) {
+                \App\Models\Domain::query()->whereKey($site->domain_id)->update([
+                    'ssl_status' => 'active',
+                    'ssl_expires_at' => $site->ssl_expires_at,
+                ]);
+            }
+
             Log::info('ProvisionHostingSslJob: SSL provisioned successfully', [
                 'site_id' => $this->siteId,
                 'domain' => $site->domain,