Renew --manual question

First off, I'd advise that "third-party" in this sense is a bit of a misnomer, since even EFF's Certbot could be technically considered "third-party". The acme.sh client you were recommended is indeed significantly more effective with DNS authorizations, as there are far more integrations included natively.

For that question, not quite. You'd need to provide an argument to that flag specifying a command (or, more commonly, a shell script) that will perform the necessary steps for the validation. See the Hooks section of the Certbot manual for more info on how to use this flag.