This fix addresses three bugs in the DNS Manual SSL certificate flow:
1. **Order caching fails when Expires is zero**: ACME orders often have
zero Expires initially. The condition `!Expires.IsZero()` caused valid
cached orders to be deleted and recreated with different TXT values.
Fixed by checking `Expires.IsZero() || Expires.After(now)`.
2. **Wildcard and base domain TXT records overwrite each other**: When
requesting SSL for both `example.com` and `*.example.com`, both
authorizations have identifier `example.com`, causing one TXT value
to overwrite the other. Fixed by using `*.domain` as the map key.
3. **Only first TXT record checked**: When multiple TXT records exist,
only the first was checked. Fixed by returning all TXT values and
checking if expected value exists in any of them.
```release-note
Fix DNS Manual SSL certificate issues for wildcard domains
```
Co-authored-by: DeployThemAll <deploythemall@users.noreply.github.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
