dns: manage saggar.dev via porkbun provider

- new saggar.dev zone (apex A -> 82.64.154.58) targeting porkbun
- replace '*' zone glob with explicit per-zone targets (cloudflare
  for vhaudiquet.fr/buildpath.win, porkbun for saggar.dev)
- CI: switch to octodns/octodns image + install cloudflare/porkbun
  provider modules

.github/workflows/dns.yaml

@@ -12,10 +12,14 @@ jobs:
   update-records:
     name: octodns
     runs-on: ubuntu-latest
-    container: octodns/cloudflare:latest
+    container: octodns/octodns:latest
     steps:
       - uses: actions/checkout@v4
+      - name: Install DNS providers
+        run: pip install octodns-cloudflare octodns-porkbun
       - name: octodns-sync - production
         run: octodns-sync --config-file ./config/production.yaml --doit
         env:
           CLOUDFLARE_TOKEN: ${{ secrets.CLOUDFLARE_TOKEN }}
+          PORKBUN_API_KEY: ${{ secrets.PORKBUN_API_KEY }}
+          PORKBUN_SECRET_KEY: ${{ secrets.PORKBUN_SECRET_KEY }}

dns/config/production.yaml

@@ -7,10 +7,24 @@ providers:
   cloudflare:
     class: octodns_cloudflare.CloudflareProvider
     token: env/CLOUDFLARE_TOKEN
+  porkbun:
+    class: octodns_porkbun.PorkbunProvider
+    api_key: env/PORKBUN_API_KEY
+    secret_key: env/PORKBUN_SECRET_KEY
 
 zones:
-  '*':
+  vhaudiquet.fr.:
     sources:
       - config
     targets:
       - cloudflare
+  buildpath.win.:
+    sources:
+      - config
+    targets:
+      - cloudflare
+  saggar.dev.:
+    sources:
+      - config
+    targets:
+      - porkbun

dns/production/saggar.dev.yaml

@@ -0,0 +1,5 @@
+---
+? ''
+: ttl: 600
+  type: A
+  value: 82.64.154.58