Hetzner is shutting down the old DNS API. See https://github.com/vadimkim/cert-manager-webhook-hetzner/issues/100. It looks like the way forward is to this webhook instead: https://github.com/hetzner/cert-manager-webhook-hetzner/. The old API shuts down in May. Migration has to happen before that.