docs(dr): 重建 runbook 补邮件自检、domain set、cloudflared 凭据恢复与邮件验收

docs/operations.md

@@ -598,8 +598,9 @@ production install:
   holds only sealed objects.
 - **Keep one database bundle off the host** as well when there is no bucket. It contains
   `secrets.env`, which a rebuild needs to read the rest.
-- **Rehearse the rebuild** once on a spare VM: §16 "Rebuild on a new host", steps 1–5,
-  then log in and restore one world. `felis offsite status` and `felis db check` exit
+- **Rehearse the rebuild** once on a spare VM: troubleshooting.md §16 "Rebuild on a new
+  host", every step but 8 (take-over) and 11 (the tunnel), then its checks: sign in with
+  an email code, restore one world and join it. `felis offsite status` and `felis db check` exit
   non-zero when the copy or the newest bundle is stale; wire them into your monitoring,
   or rely on the watchdog's mail.