docs: add analytics to enterprise docs dns and cert requirements

enterprise/quick-start.mdx

@@ -125,6 +125,7 @@
     |--------|---------|
     | `<your-domain>` | `openhands.example.com` |
     | `app.<your-domain>` | `app.openhands.example.com` |
+    | `analytics.app.<your-domain>` | `analytics.app.openhands.example.com` |
     | `auth.app.<your-domain>` | `auth.app.openhands.example.com` |
     | `llm-proxy.<your-domain>` | `llm-proxy.openhands.example.com` |
     | `runtime-api.<your-domain>` | `runtime-api.openhands.example.com` |
@@ -172,6 +173,7 @@
 for h in \
   "${BASE_DOMAIN}" \
   "app.${BASE_DOMAIN}" \
+  "analytics.app.${BASE_DOMAIN}" \
   "auth.app.${BASE_DOMAIN}" \
   "llm-proxy.${BASE_DOMAIN}" \
   "runtime-api.${BASE_DOMAIN}"; do
@@ -180,9 +182,9 @@
 done
 ```
 
 Expected: each hostname above resolves to your VM's public IP address.
 
 Test that a runtime wildcard hostname resolves:
 
 ```bash
 getent hosts "test.runtime.${BASE_DOMAIN}" || nslookup "test.runtime.${BASE_DOMAIN}"
@@ -217,7 +219,7 @@
 done
 ```
 
 Any HTTP response code other than `000` is acceptable for reachability checks
 (for example `200`, `301`, `302`, `401`, `403`, `405`).
 
 If any check fails, stop and resolve before continuing:
@@ -228,10 +230,10 @@
 
 | Requirement | Why It Exists |
 |------------|----------------|
 | `443/TCP` inbound | Primary HTTPS entrypoint for users and service hostnames |
 | `30000/TCP` inbound | Replicated/KOTS Admin Console for install and configuration |
 | `80/TCP` inbound | HTTP entrypoint used for ingress/redirect behavior |
 | `*.runtime.<domain>` DNS + cert SAN | Runtime sandboxes are addressed by dynamic runtime-specific hostnames |
 | `replicated.app`, `proxy.replicated.com` | Replicated control-plane/license/install paths |
 | `images.r9...`, `charts.r9...`, `updates.r9...`, `install.r9...` | Vendor distribution image/chart/update/install endpoints |
 | `traefik.github.io` | Embedded cluster ingress chart repository |
@@ -297,7 +299,7 @@
 ### 5. Upload TLS certificate (if not provided with the install command)
 
 If you did not provide certificates with the `install` command, select **"Upload your own"**,
 enter your base domain under **Hostname**, upload your private key and SSL certificate, then click **Continue**.
 
 ![Upload TLS certificate](./images/upload-tls-certificate.png)
 
@@ -322,7 +324,7 @@
 
 ### Domain Configuration
 
 - Select **"Derive hostnames from domain (recommended)"**
 - Enter your base domain (e.g., `openhands.example.com`)
 
 ### Certificate Configuration