fix(cloudflare-ddns): add theexclusionzone.com zone with per-domain PROXIED

The theexclusionzone.com (Ghost EN) zone was never in DOMAINS, so favonia
never updated its origin A records. When the ISP rotated the public IP, the
EN records went stale and Cloudflare returned 522 (apex+www are proxied).

Add all three EN records to DOMAINS and use favonia 1.16.2's per-domain
PROXIED expression so apex+www stay orange while the wildcard and the
chemavx/zona zones stay grey, all from one DDNS instance.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

cloudflare-ddns/deployment-cloudflare-ddns.yaml

@@ -34,9 +34,9 @@ spec:
               key: CF_API_TOKEN
               name: cloudflare-ddns-secret-infisical
         - name: DOMAINS
-          value: chemavx.xyz,*.chemavx.xyz,zonadeexclusion.com,*.zonadeexclusion.com
+          value: chemavx.xyz,*.chemavx.xyz,zonadeexclusion.com,*.zonadeexclusion.com,theexclusionzone.com,www.theexclusionzone.com,*.theexclusionzone.com
         - name: PROXIED
-          value: 'false'
+          value: is(theexclusionzone.com,www.theexclusionzone.com)
         - name: UPDATE_CRON
           value: '@every 5m'
         - name: IP4_PROVIDER