Call when an agent needs TLSA records at the exact hostname (usually _port._proto.name). Exact $0.006 USDC. Prefer unpaid POST /v1/sandbox/dns-tlsa first.