Harden read-only provider with tests, docs, and CI

docs/data-sources/dns_records.md

@@ -0,0 +1,39 @@
+---
+page_title: "dynu_dns_records Data Source"
+description: |-
+  Lists DNS records for the Dynu root domain resolved from a hostname.
+---
+
+# dynu_dns_records Data Source
+
+## Example Usage
+
+```terraform
+data "dynu_dns_records" "records" {
+  hostname = "www.example.com"
+}
+```
+
+## Schema
+
+### Required
+
+- `hostname` (String) Fully-qualified hostname.
+
+### Read-Only
+
+- `domain_id` (Number)
+- `domain_name` (String)
+- `records` (List of Object)
+  - `id` (Number)
+  - `domain_id` (Number)
+  - `domain_name` (String)
+  - `node_name` (String)
+  - `hostname` (String)
+  - `record_type` (String)
+  - `ttl` (Number)
+  - `state` (Boolean)
+  - `content` (String)
+  - `updated_on` (String)
+  - `group` (String)
+  - `host` (String)

docs/data-sources/domain.md

@@ -0,0 +1,25 @@
+---
+page_title: "dynu_domain Data Source"
+description: |-
+  Resolves a hostname to its Dynu root domain and returns domain details.
+---
+
+# dynu_domain Data Source
+
+## Example Usage
+
+```terraform
+data "dynu_domain" "selected" {
+  hostname = "www.example.com"
+}
+```
+
+## Schema
+
+### Required
+
+- `hostname` (String) Fully-qualified hostname.
+
+### Read-Only
+
+- `domain` (Object) Same fields returned by `dynu_domains.domains[*]`.

docs/data-sources/domains.md

@@ -0,0 +1,34 @@
+---
+page_title: "dynu_domains Data Source"
+description: |-
+  Lists domains visible to the configured Dynu API key.
+---
+
+# dynu_domains Data Source
+
+## Example Usage
+
+```terraform
+data "dynu_domains" "all" {}
+```
+
+## Read-Only Attributes
+
+- `domains` (List of Object)
+  - `id` (Number)
+  - `name` (String)
+  - `unicode_name` (String)
+  - `token` (String, Sensitive)
+  - `state` (String)
+  - `group` (String)
+  - `ipv4_address` (String)
+  - `ipv6_address` (String)
+  - `ttl` (Number)
+  - `ipv4` (Boolean)
+  - `ipv6` (Boolean)
+  - `ipv4_wildcard_alias` (Boolean)
+  - `ipv6_wildcard_alias` (Boolean)
+  - `allow_zone_transfer` (Boolean)
+  - `dnssec` (Boolean)
+  - `created_on` (String)
+  - `updated_on` (String)