Wildcard TLS with Certbot and Cloudflare DNS-01 — a copy-paste walkthrough

A complete end-to-end guide to issuing a Let's Encrypt wildcard certificate with Certbot and a DNS-01 challenge against Cloudflare — exact commands, credentials setup, verification, and auto-renewal.