refactor: remove direct DNS mode

server/README.md

@@ -22,7 +22,6 @@ Environment variables:
 - `RMM_SMTP_SERVER_NAME` - optional TLS server name override
 - `RMM_COOKIE_SECURE` - defaults to `true` outside explicit development mode
 - `RMM_DEVICE_DOMAIN` - wildcard device domain, for example `routers.example.com`
-- `RMM_DNS_SYNC_TOKEN` - optional random bearer secret (at least 32 characters in production) for an authoritative DNS synchronizer
 - `RMM_ALLOW_LEGACY_ENROLLMENT` - opt-in shared enrollment compatibility mode
 - `RMM_METRIC_RETENTION_DAYS` - metric history retention, default `30`
 - `RMM_WEB_DIR` - static web UI directory, default `web`
@@ -43,7 +42,6 @@ Agent API:
 
 - `POST /api/agent/enroll`
 - `POST /api/agent/heartbeat`
-- `POST /api/agent/dns/update`
 - `POST /api/agent/commands/next`
 - `POST /api/agent/commands/{id}/result`
 
@@ -62,9 +60,6 @@ Operator API:
 - `POST /api/enrollment-grants`
 
 - `GET /api/devices`
-- `GET /api/dns/records`
-- `GET|PATCH /api/devices/{id}/dns`
-- `GET /api/devices/{id}/dns/history`
 - `GET /api/events` (authenticated SSE stream; the client reloads user-scoped data on change)
 - `GET /api/devices/{id}`
 - `POST /api/devices/{id}/transfer`