delete the golden snapshot from the drill that proves it obsolete master
The snapshot is a build-time stand-in for an automatic backup that does not exist yet: enabling Hetzner Backups does not produce one, so the first restore drill would have nothing to restore from. phase_12_snapshot() already declines to create one once an automatic backup exists; the matching condition for removing it was never written, and the snapshot billed monthly for a use that cannot recur. A restore drill that passed without --from-snapshot is the proof, because it restored from a real automatic backup. That makes drill-restore.sh the only script positioned to judge the snapshot obsolete — drill-rebuild.sh restores data with restic and never touches a Hetzner image, which is why all it could ever do was print a reminder. Deletion is best-effort: a leftover snapshot costs money, while failing a drill that has already passed costs trust in the drill.