Returns one domain. Use it to reconcile after a lifecycle event.

Each purpose (links, email) reports a stable setupState:
not_requested, queued, awaiting_dns (you need to add the listed DNS records),
verifying, active, failed, or cancelled.