CVE-2026-80274: fix an assertion failure in a validating resolver when
a wildcard answer carries a signed NSEC3 proof and an unsigned NSEC (or
a signed NSEC and an unsigned NSEC3) at the same owner name; the NOQNAME
proof type accepted by the validator is now recorded and used both when
caching and when serving the proof