use CNAME for master-key instead of A/AAAA entries
As mentioned in !244 (merged), Hetzner currently rejects the request to create a CNAME for master-key with the error "entry already exists". This is not the case as can be seen in the Hetzner console. A support request has been created. This MR may be merged after Hetzner replied/fixed the issue.