Domains: don't run CNAME checks on domain updates (#12564)
This check only makes sense when adding a new domain, not when updating.
And on .com, the target CNAME is a domain that points to another CNAME,
so the check always fails after a valid domain is added. The domain
field is set to read-only, so this is fine.