SECURITY UPDATE: excessive NSEC3 iterations CPU denial of service
during insecure delegation validation
debian/patches/CVE-2026-1519.patch: cap NSEC3 iterations at
DNS_NSEC3_MAXITERATIONS (150) in isdelegation() and skip
already-trusted rdatasets during the insecurity proof, and require
dns_trust_secure before the iteration test so an unvalidated
opt-out NSEC3 cannot short-circuit the proof (upstream follow-up
1bd458d3ba, bind9#5970)