Per-subdomain A records instead of wildcard DNS

Decision

Each service gets its own A record pointing to 72.61.173.164 via Hostinger DNS. No wildcard *.arjtech.in record.

Rationale

Explicit records provide visibility into what is deployed. Prevents accidental exposure of new subdomains. Easier to audit. Wildcard was incorrectly documented as existing but never actually configured.

Alternatives Rejected

Rejected: (1) Wildcard DNS — less secure, harder to audit

Outcome

Pending