Thank you for your help! That Mailgun help article indicates you still need to set up SPF and DKIM records to verify a custom domain. But, in my case I was able to use a sandbox domain in Mailgun because I only want to send to myself, and you can do this as an “Authorized Recipient”. I used this email transport config: Email provider mailgun - #19 by mickaeldurand
Works!