Run cross-cloud dangling DNS check at scale

Split out from ENG-400.

We should expand the affiliation agent to proactively scan a customer's environment for dangling DNS records, rather than running on demand, using all of the heuristics of the affiliation agent (i.e., triggering runs against cross-cloud IPs, certificate mismatches, abnormal website content, etc.).