New

• dashboard: simplify domain detail page to Resend-style minimal layout
• docker: enable port 25 binding for non-root worker process
• seo: add sitemap index combining blog, docs, and legal sitemaps
• smtp: set bounce SMTP to standard port 25 for inbound delivery

Fixed

• api: install rustls CryptoProvider to prevent subscribe panic
• blog: fix newsletter CORS error and merge duplicate CTAs
• blog: use correct signup form slug for newsletter subscribe
• domain-connect: mark MX record as essential OnApply
• domain-connect: revert MX to essential Always (required for bounce handling)
• smtp: add NET_BIND_SERVICE capability to bind port 25
• smtp: capture tokio Handle for bounce/DMARC/complaint handlers
• smtp: revert bounce port to 2525 with iptables PREROUTING redirect