Merge pull request 'DNS-Token bei Bedarf über Vault-Sync nachladen' (#30) from fix/dns-vault-refresh-20260814 into main

app.py

@@ -1557,9 +1557,10 @@ async def caddy_site_remove(hostname: str, _=Depends(_verify), dry_run: bool = Q
 
 
 async def _hetzner_zone_and_rrsets(zone_name: str):
-    token = _read("HETZNER_DNS_TOKEN")
+    try:
-    if not token:
+        token = await asyncio.to_thread(_get_hetzner_dns_token)
-        raise HTTPException(503, "HETZNER_DNS_TOKEN unavailable in Butler vault cache")
+    except RuntimeError as exc:
+        raise HTTPException(503, str(exc))
     headers = {"Authorization": f"Bearer {token}"}
     async with httpx.AsyncClient(timeout=30) as client:
         zones_response = await client.get(f"{HETZNER_DNS_API}/zones", headers=headers, params={"name": zone_name})