DKIM Selector Rotation Planner
Build a safe DKIM selector cutover plan that keeps old keys published long enough for delayed mail.
What this does
This planner does not generate or validate a DKIM key. It plans the operational rotation window: when to publish new._domainkey, when to switch signing, and when the old selector can be removed.