TEMP: isolate whether DNS-->Vault (the one rejoin in this tree) is the trigger

README.md

@@ -83,6 +83,7 @@ flowchart LR
 
     LAN --> DNS["Internal DNS<br/>two zones"]
     LAN --> Vault["Vault<br/>PKI + secrets"]
+    DNS --> Vault
 
     Vault --> Apps["App Host<br/>41 stacks"]
     Vault --> Automation["Automation VM<br/>Git + orchestration"]