Yes, Lightsail wants to hold the DNS zone. Setting the nameserver to the lightsail NS fixed the split brain, allowing Lightsail to understand that StaticIP2 == StaticIP2 long enough to set the Let’s Encryp SSL/TLS certification
What remains to be seen is whether this breaks the mail routing. Wait, as I’m editing, I see “updating failed, could not get a valid response from the server… I wonder”
Haha — now Site took too long to respond. Maybe I celebrate too soo
nslookup willaford.com

But load willaford.com in a browser, and everything works. OK. Let’s check email from the wordpress admin console.
Email not working, then site not working again.
Change something [anything, just click some buttons…really {not really, but I forgot what clicked}] and site starts working.
Checking email again: no evidence of success, no evidence of failure.