Custom domains for workspaces and app admin

Workspace super admins can add and verify custom workspace and app-admin domains, choose a primary address, recover from domain changes, and remove a custom address when needed. Generated fallback addresses remain available as a dependable path back in.