Is DMARC record really as simple as it sounds?

yes that looks good. instead of a test email, if you go to website and reset password do you also get it sent from mailer shopify? also, can you double check that your from email address in shopify settings → notifications → from is the same domain as what you worked on for dns?