- Remove aws_ses_configuration_set, aws_ses_domain_identity, aws_ses_domain_dkim
- Remove SES verification and DKIM Route53 records
- Remove SES outputs
- Add MX, SPF, DKIM, DMARC records for cibello.app -> mail.aamos.systems
- DKIM key split into two 255-char strings per Route53 limit
No apply; plan saved as cibello.plan