* fix(cert-manager): rotate Cloudflare DNS credentials * docs(cert-manager): clarify account token verification