infra - create new service and idp domains

[edospadoni]

Summary

Define the required DNS entries for production and QA environments of the identity provider (Logto) and the services hosted on Render.

Requested domains

Done	Subdomain	Purpose	Target
✅	id.nethesis.it	Identity provider	domains.logto.app (Logto PROD instance)
✅	qa.id.nethesis.it	QA identity provider	domains.logto.app (Logto QA instance)
	my.nethesis.it	Render services	my-proxy-prod.onrender.com (Render PROD instance)
✅	qa.my.nethesis.it	Render QA services	my-proxy-qa.onrender.com (Render QA instance)
✅	api.my.nethesis.it	Bump.sh API reference	custom.bump.sh (Bump.sh doc link)

Context

These subdomains will be used for authentication (via Logto) and application access, both in production and QA environments.

• id.nethesis.it and qa.id.nethesis.it must point to the Logto instances configured as identity providers.
• my.nethesis.it and qa.my.nethesis.it must point to the frontend/backend services hosted on Render.

Tasks

• Create A/AAAA or CNAME records as required for Logto
• Create A/AAAA or CNAME records as required for my.nethesis.it
• Ensure SSL certificates are issued and correctly managed (e.g., via Let's Encrypt or Render's automatic certificates).
• Confirm access to all services via the defined subdomains.

Notes

• No wildcard certificates are required at this stage.
• Future environments may follow the same subdomain pattern.