A DNS name may carry only one TXT record starting with v=spf1. With two or more, receivers treat
SPF as a permanent error, so it fails instead of passing.
Keep exactly one all at the end. weneed.email places its own SPF record on a dedicated
return-path subdomain, so it shouldn’t collide with your main domain’s SPF.