dnsmasq: add fix related to DNSSEC verification from upstream

Husaam Mehdirequested to merge
for_dnsmasq_cherry_pick into devel

To find the DS record for a given zone the parent zone's nameserver must be queried and not the nameserver for the zone. Otherwise DNSSEC verification for unsigned delegations breaks.

Signed-off-by: Uwe Kleine-König uwe+openwrt@kleine-koenig.org Link: https://patchwork.ozlabs.org/project/openwrt/patch/20250127151223.1420006-1-uwe+openwrt@kleine-koenig.org/ Signed-off-by: Hauke Mehrtens hauke@hauke-m.de (cherry picked from commit 6dc0f0c50cf1072ec3751c0fb1fc152a0a86487d)

Merge request reports