[cf-deploy] reorder steps in resolv-replace dns workaround