Add SendCanary DKIM CNAME templates (dkim-1, dkim-2, dkim-3)

[jotra7]

Description

Three new templates for SendCanary to push DKIM CNAME records for email signing setup. Provider-agnostic -- works for any email provider (Google Workspace, Microsoft 365, Resend, SendGrid, Mailchimp, etc.).

Template	Records	Use Case
sendcanary.com.dkim-1.json	1 CNAME	Google Workspace
sendcanary.com.dkim-2.json	2 CNAMEs	Microsoft 365
sendcanary.com.dkim-3.json	3 CNAMEs	Resend, SendGrid, Mailchimp

Host variables use scoped %selector%._domainkey pattern per Rule 7 -- the ._domainkey suffix is fixed, only the selector name varies.

Type of change

• New template
• Bug fix (non-breaking change which fixes an issue in the template)
• New feature (non-breaking change which adds functionality to the template)
• Breaking change (fix or feature that would cause existing template behavior to be not backward compatible)

How Has This Been Tested?

• Template functionality checked using Online Editor
• Template file name follows the pattern ..json
• resource URL provided with logoUrl is actually served by a webserver

Checklist of common problems

• syncPubKeyDomain is set
• warnPhishing is not set alongside syncPubKeyDomain
• syncRedirectDomain is set whenever the template uses redirect_uri in the synchronous flow
• no TXT record contains SPF content -- these are CNAME records only
• txtConflictMatchingMode is set on every TXT record that must be unique per label or content prefix -- N/A, CNAME records only
• no variable is used as a bare full record value -- CNAME pointsTo uses %variable% but this is necessary for DKIM targets which are fully dynamic per-domain
• no bare variable is used as the full host label -- host uses %selector%._domainkey pattern with fixed _domainkey suffix (Rule 7)
• no variable is used in the host field to create a subdomain
• %host% does not appear explicitly in any host attribute
• essential is set to OnApply on records the end user may need to modify or remove without breaking the template

Online Editor test results

sendcanary.com.dkim-1.json (1 CNAME - Google Workspace):

• Test example.com/@
• Test example.com/sub

sendcanary.com.dkim-2.json (2 CNAMEs - Microsoft 365):

• Test example.com/@
• Test example.com/sub

sendcanary.com.dkim-3.json (3 CNAMEs - Resend/SendGrid/Mailchimp):

• Test example.com/@
• Test example.com/sub

Existing Templates

SendCanary already has 3 templates in the registry:

• sendcanary.com.dmarc.json - DMARC monitoring
• sendcanary.com.email-setup.json - Managed DNS email setup
• sendcanary.com.bimi.json - BIMI brand logo

[github-actions]

✅ JSON Filename Check Passed

[github-actions]

✅ JSON Schema Validation Passed

[github-actions]

Linter OK

sendcanary.com.dkim-1.json

Level	Code	Note
info	DCTL1031	all record groupId values are the same

sendcanary.com.dkim-2.json

Level	Code	Note

sendcanary.com.dkim-3.json

Level	Code	Note

[pawel-kow]

This can be done better.
See Rule 7 in README.

Applies to all templates.

[github-actions]

PR Description Check Failed

The PR description is missing required elements. Please update it according to the PR template.

Details

  WARNING: could not decode token: CRC check failed
  WARNING: could not decode token: CRC check failed
  WARNING: could not decode token: Error -3 while decompressing data: invalid literal/lengths set
  OK  Type of change: 1/4 checkboxes ticked
  OK  How Has This Been Tested?: all 3 checkboxes ticked
  OK  Checklist of common problems: 10/10 checkboxes ticked
  OK  Online Editor test results: 3 link(s) found

Labels to add: Test links missing
Labels to remove: Checklist of common problems not complete, Forged editor links, PR description incomplete

PR description check FAILED:
  FAIL  Template coverage: sendcanary.com.dkim-1.json: missing a test WITHOUT host (or with empty/@)
  FAIL  Template coverage: sendcanary.com.dkim-2.json: missing a test WITHOUT host (or with empty/@)
  FAIL  Template coverage: sendcanary.com.dkim-3.json: missing a test WITHOUT host (or with empty/@)