Preview environment teardown removes DNS before certificate validation jobs finish probing the old hostname during a failover rehearsal

The environment lifecycle cleanup is correct for cost control and too early for the remaining verification path. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.