The Zones/DNS pages' 'Last sync' reads the sync_zones / sync_dns_records
SyncJob rows, written by SyncCloudflareZonesJob / SyncCloudflareDnsRecordsJob.
Those jobs were only ever dispatched by the UI's manual refresh button — they
were never on the schedule — so 'Last sync' sat a week stale even though the
(separate) registry sync ran. Add a cloudflare:sync-api task that dispatches
both jobs every 30 min (zones first, then DNS, which reads the zones table).