verify_organization_domain

Check one organization domain public TXT verification record. Account read/write grant and current organization owner/admin required; both rechecked when claiming the 15-second check slot and before saving a result. Fixed public DNS resolver only; no provider credentials, DNS mutation, sending/routing, spending, removal or top-level receipt. Exact domain/token/check snapshot guards stale results. At most 20 requests per caller per minute; no force or polling. verified reports this lookup; a previously verified domain is not unverified when TXT is missing. Returned metadata omits private provider/undo records.