Decouple console DNS sync from deploy validation

.github/workflows/pipeline.yaml

@@ -175,12 +175,6 @@ jobs:
           ANSIBLE_HOST_KEY_CHECKING: "False"
         run: bash ../scripts/github-actions/run-console-deploy-playbook.sh
 
-      - name: Update Cloudflare svc.plus DNS
-        working-directory: playbooks
-        env:
-          ANSIBLE_HOST_KEY_CHECKING: "False"
-        run: bash ../scripts/github-actions/run-cloudflare-svc-plus-dns-playbook.sh
-
   validate:
     name: Validate
     runs-on: ubuntu-latest
@@ -201,3 +195,44 @@ jobs:
             "${CANONICAL_DOMAIN}" \
             "${SERVED_DOMAINS}" \
             "${EXPECTED_FRONTEND_IMAGE}"
+
+  update_dns:
+    name: Update DNS
+    runs-on: ubuntu-latest
+    needs:
+      - prep
+      - build
+      - deploy
+    if: ${{ always() && needs.deploy.result == 'success' }}
+    continue-on-error: true
+    env:
+      TARGET_HOST: ${{ needs.prep.outputs.target_host }}
+      RUN_APPLY: ${{ needs.prep.outputs.run_apply }}
+      FRONTEND_IMAGE: ${{ needs.build.outputs.image_ref }}
+    steps:
+      - name: Check Out Repository
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+
+      - name: Check Out Playbooks Repository
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          repository: x-evor/playbooks
+          ref: 80c545a95c3b16459f6494ed13d951faac57bfa8
+          path: playbooks
+          token: ${{ github.token }}
+
+      - name: Set Up Python
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        with:
+          python-version: "3.11"
+
+      - name: Install Ansible
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install ansible
+
+      - name: Update Cloudflare svc.plus DNS
+        working-directory: playbooks
+        env:
+          ANSIBLE_HOST_KEY_CHECKING: "False"
+        run: bash ../scripts/github-actions/run-cloudflare-svc-plus-dns-playbook.sh