Custom domains are served again, and the domain page lists every expected DNS record

A custom domain bound to a container stayed unreachable even though its certificate had been issued and the domain showed as verified. The public reverse proxy configuration was written to the wrong place, so it was never loaded. Fixed: already-bound domains are served again with nothing to do on your side.
A domain page only ever showed one DNS record, the apex one, and hid it as soon as the domain was verified. It now permanently lists every expected record, with one CNAME per bound subdomain.
An explicit note says that "www" is not served automatically: bind the "www" subdomain to a service, then add its CNAME record.