Binds a TON Storage bag to a .ton domain. Returns a QR code that the domain owner scans with Tonkeeper or MyTonWallet to sign the DNS update — no private keys required.