See a domain's DMARC policy and report addresses. Catches p=none, missing rua=, and external-report opt-in misses.