[jaspermayone]

Adds one apex TXT value on witcc.dev:

v=MCPv1; k=ed25519; p=fTfE5lZvw/8PJwBSOzAO6bOa/cJpsC5WvXPKHk4Mr3g=

The official MCP Registry reads this record to prove that the club controls the dev.witcc.* namespace. WIT Calendar uses it to publish its MCP server as dev.witcc/calendar (WITCodingClub/calendar-backend, server.json). The registry reads the record on the apex only, not under a selector.

The private key is the MCP_PRIVATE_KEY secret on the mcp-registry environment of WITCodingClub/calendar-backend. That environment deploys from main only.

To rotate the key, replace this value. Do not keep the old value next to the new one: the registry tries a stale record first and fails.

Merge this before the calendar-backend PR, because that merge publishes and needs this record.

[github-actions]

octoDNS plan

witcc.dev.

cloudflare

Operation	Name	Type	TTL	Value	Source
Update		TXT	300	MS=ms50132535; google-site-verification=gM4K9uxuf8Ec4WCHPFh87OPjG-JqWMHJm57Kg5OII8g; v=spf1 include:_spf.mx.cloudflare.net ~all
			300	MS=ms50132535; google-site-verification=gM4K9uxuf8Ec4WCHPFh87OPjG-JqWMHJm57Kg5OII8g; v=MCPv1; k=ed25519; p=fTfE5lZvw/8PJwBSOzAO6bOa/cJpsC5WvXPKHk4Mr3g=; v=spf1 include:_spf.mx.cloudflare.net ~all	config
Update	octodns-meta	TXT	120	octodns-version=1.22.0; provider=cloudflare; time=2026-09-21T20:10:59.830614+00:00
			60	octodns-version=1.22.0; provider=cloudflare; time=2026-11-08T15:54:41.610736+00:00

Summary: Creates=0, Updates=2, Deletes=0, Existing=16, Meta=False

---

Planned against main with a read-only Cloudflare token. Only the zone files at the repository root are included. Changes to config/, bin/ or .github/ are not in this plan, so review those by hand.