TP31: cf-sync.py Parser+Logik-Fix, CF-Leichen geloescht, grafana-Ingress-Backup

- cf-sync.py: Multi-Hostname-Caddy-Bloecke geparst (27 statt 5 Sites),
  Vergleich CF->Caddy statt CF->Origin (TP31-Zielbild), *.bf.*-intern gefiltert
- CF: 6 CNAME- und 1 Ingress-Leiche geloescht (grafana, gateway-dw, nautobot,
  phpmyadmin.bf, speedtest.bf, z2m25.bf)
- Backup vor grafana-Removal

docs/cf-backup/bf-nas-ingress-20260829-vor-grafana-removal.json

@@ -0,0 +1,23 @@
+{
+  "success": true,
+  "errors": [],
+  "messages": [],
+  "result": {
+    "tunnel_id": "220c9958-401b-4111-9451-f3db09bba2d5",
+    "version": 4,
+    "config": {
+      "ingress": [
+        {"service": "http://10.40.20.157:3000", "hostname": "gitea.emsenhuber.net"},
+        {"service": "http://10.40.20.109:3000", "hostname": "grafana.emsenhuber.net"},
+        {"service": "http://10.40.20.173:3000", "hostname": "pve-mcp.emsenhuber.net"},
+        {"service": "http://10.40.20.127", "hostname": "vw.emsenhuber.net"},
+        {"service": "http://10.40.20.10:8080", "hostname": "ds-bf.emsenhuber.net"},
+        {"service": "ssh://10.40.20.10:22", "hostname": "3k23uow7.emsenhuber.net"},
+        {"service": "http_status:404"}
+      ],
+      "warp-routing": {"enabled": true}
+    },
+    "source": "cloudflare",
+    "created_at": "2026-08-24T08:28:18.806844Z"
+  }
+}