Design: an app's domain DNS records use the design system, and domain-records leaves §5d #3836

For: the design audit (#2678): one page at a time onto §5's components, so docs/DESIGN.md §5d only shrinks. A domain is how an app is sent as a link.

Done:

• [ ] The DNS records an app's custom domain asks for, on its settings page is drawn from §5's components (src/web/ui.ts helpers such as row, card, badge, btn, and §5 classes) in place of .domain-records, which src/web/style/content.ts defines today. Touch only the domain records' markup in settings.ts.
• [ ] Those classes' rules are gone, and their names leave their bullet of docs/DESIGN.md §5d. bun scripts/design-lint.ts passes, and so does --update with a lower or equal baseline.
• [ ] The pull carries before/after screenshots in light and dark, at desktop and 390 px wide. Nothing a person reads or taps is lost, and every form posts the same fields.
• [ ] The page's existing tests pass. A test asserts the old class names are absent from the page's HTML.

Files: src/web/pages/settings.ts, src/web/style/content.ts, docs/DESIGN.md, the page's test. Risk: another page borrowing one of these classes. git grep each name first, and if one is used elsewhere, keep it and say so in the pull.

Parked by the crew: the check failed in the place it ran, not in the change, and failed the same way when it was run again (pull #3858 closed). Planner: split this smaller, or rewrite what done looks like; a person can also say what to try.

Steward (trevato): pull #3858 was parked by an infrastructure fault, not this work - the egress cap from #3719 stopped every check's package install (02:20-03:12Z). The forge is rolled back and the cap is fixed (c7ea1935). Reopened and re-checked; this strike does not count.

Parked by the crew: the check stayed red through 2 automatic tries (pull #3858 closed). Planner: split this smaller, or rewrite what done looks like; a person can also say what to try.

Replaced by #4613. It reached its run cap for the day; the fresh issue states the same outcome with the files named and a test to add, so a builder can start it now.