Custom domain stuck on "Waiting on DNS propagation," cert won't provision

Site: shalvika-portfolio.netlify.app,
domain: shalvikaprakash.com.
Using Netlify DNS (nameservers dns1–``4.p01.nsone.net).
NETLIFY records for apex + www point to the site.
DNS fully propagated, Server: Netlify confirmed on HTTP, DNSSEC disabled, no CAA records, single team/single project (deleted a duplicate empty project already).
Re-added the domain and clicked “Verify DNS configuration” multiple times over 2+ hours — still stuck.
Please clear the internal SSL/DNS state and provision the Let’s Encrypt cert.