CVE-2026-19666: fix an assertion failure in a resolver using "dns64" with
"break-dnssec yes", where a partially excluded AAAA RRset cached with a
NOQNAME proof left the proof aliased to an rdataset the filter64 path had
already returned to the message pool