1. OVH: Attach failover IPs to gs-mta-primary
2. OVH: Set reverse DNS (PTR) — ovh-{ip}.mta.movamedia.com
3. Cloudflare: Create forward A record (FCRDNS match)
4. Cloudflare: Add ip4: entries to _spf.mta.movamedia.com
5. RDS: Insert IP records (status: warming)
6. MTA Node: Bind to interface (netplan apply)
7. MTA Node: Update sources.toml + ip_pool.json
8. MTA Node: Add to warmup_state.json (day=1)
9. MTA Node: Regenerate shaping_warmup.toml
10. MTA Node: SIGHUP kumod to reload config
11. Verify: Confirm IPs bound + in egress cache