Importing a Forge server already moved each site's code, environment, database and workers onto a machine Shipways runs. What it left to you was the last mile: pointing the domain at the new machine and requesting its certificate.
That part is now guided. Each moved site shows its last two steps, with a live check of where every one of its names currently resolves. A name behind Cloudflare's proxy is recognised for what it is, not reported as pointing somewhere else. The top of the import says what to do next.
The site's own certificate is requested once the move is finished, when the name already points at the new machine. It is no longer requested while the name still points at Forge.