Add a time.sleep in the certbot gandi dns-01 hook

This regularly fails to validate because Gandi LiveDNS takes a bit to
sync all the anycast nodes, and the secondary letsencrypt validation can
see stale records.