validate: check record value formats, run the same check before every deploy

[TinyBrickBoy]

This PR hardens record validation so a broken file like the aurora TXT object (fixed in #21) can't break a deploy again. That PR was merged even though validate was red, and one bad record made skrime reject the whole skillissue.gg zone.

validate-pr.js

• Checks every value against its record type:
  • A: IPv4
  • AAAA: IPv6
  • CNAME/ALIAS: exactly one hostname
  • MX: <prio> <host>
  • SRV: <prio> <weight> <port> <target>
  • CAA: <flags> issue|issuewild|iodef <value>
  • TXT: no surrounding quotes, max 2048 chars
• Rejects objects, empty strings and empty lists, and points people to a separate _label.json file instead.
• Exports validateContent so the deploy script can reuse it.

deploy.js

• Runs validateContent on every file before the POST, so a broken zone never reaches skrime, even if a red PR gets merged. The other domains still deploy.

README

• Documents the new rules.

Tested locally:

• All 9 existing record files pass.
• Malformed cases fail with clear messages: object TXT, bad IPv4/IPv6, CNAME list, URL as CNAME, MX without priority, quoted TXT, empty list.
• Against a mock API, the current data deploys, and the old aurora file fails skillissue.gg before the POST while addictedto.beer still deploys.

Note: validate fails on this PR by design because it only touches files outside domains/.

🤖 Generated with Claude Code

https://claude.ai/code/session_01Vzw95xoy6RWUeGkRfgbMST

---

Generated by Claude Code

[github-actions]

Changes requested

Thanks for your submission! A few things need fixing before this can be merged:

• .github/scripts/deploy.js is outside domains/. PRs may only add or edit files in domains/<domain>/<subdomain>/.
• .github/scripts/validate-pr.js is outside domains/. PRs may only add or edit files in domains/<domain>/<subdomain>/.
• README.md is outside domains/. PRs may only add or edit files in domains/<domain>/<subdomain>/.

Push a new commit to this pull request and I'll re-check automatically.

[TinyBrickBoy]

validate fails here by design. This PR only changes maintainer files (.github/scripts/*, README.md), and validate-pr.js accepts only changes inside domains/<domain>/<subdomain>/. Nothing is wrong with the code; a maintainer has to merge past this check.

---

Generated by Claude Code