I switched registrar, as OVH was ~4x cheaper.
This needs a small change to the module to both refer to OVH instead of
Gandi in the documentation, and make use of the correct API.
I also needed to disable the propagation check, as it looks like OVH is
slower than Gandi, and leads to spurious errors...
Some of the secrets were using an invalid format due to (probably?)
being encrypted with a beta version of `age`.
I didn't need to rekey *all* the secrets, but I might as well