Fix Fastly domain reassignment renewal check

[loks0n]

Summary

• require certificate issuance when a Fastly domain is missing or belongs to another service
• delegate to TLS renewal checks once the domain is already assigned correctly
• cover both ownership paths

Tests

• vendor/bin/phpunit tests/Cdn/Certificates/Provider/FastlyTest.php
• vendor/bin/pint --test src/Cdn/Certificates/Provider/Fastly.php tests/Cdn/Certificates/Provider/FastlyTest.php
• vendor/bin/phpstan analyse -c phpstan.neon --memory-limit=2G src/Cdn/Certificates/Provider/Fastly.php

[greptile-apps]

Greptile Summary

The PR aligns Fastly renewal checks with domain ownership before delegating correctly assigned domains to TLS renewal logic.

• Requires issuance when a domain is absent or assigned to another Fastly service.
• Skips unsupported renewal work for classic domains without a service assignment.
• Adds focused coverage for missing ownership, foreign ownership, and current-service delegation.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains; the previously reported classic-domain renewal loop is fixed by returning false for records without a service assignment.

Important Files Changed

Filename	Overview
src/Cdn/Certificates/Provider/Fastly.php	Adds ownership-aware renewal decisions and resolves the previously reported perpetual renewal signal for classic domains.
tests/Cdn/Certificates/Provider/FastlyTest.php	Covers foreign-service ownership, classic domains, and delegation to TLS renewal checks for correctly assigned domains.

_{Reviews (2): Last reviewed commit: "Skip renewal for classic Fastly domains" | Re-trigger Greptile}