Add staging subdomain yaml
give district admins permission to read regions