Investigate DNS race condition (Puppet deployment using git fetch). Should that use scap instead?

Incident metadata:

• Action item extracted from incident 2025-10-14: Gerrit is down
• Incident document: https://docs.google.com/document/d/1YiqKrP_JGOglphpoxKYyvxZ9qjN-hpthX9b2UyMYty4/edit?tab=t.0