feat: Add check for onplural.sh domain entry

[davidspek]

We should limit people to only be able to create a subdomain under onplural.sh that's a single level deep (xxx.onplural.sh and not xxx.yyy.onplural.sh). The second option will cause an error in our external-dns deployment where graphql can't find the domain, even though it is created in Plural.