There's a recently-launched feature (in preview) called "per-project DNS authorization" which generates unique validation subdomains, so that your CNAME records don't collide across projects or regions when validating the same domain. You can use it ...