Support RPZ address overrides for local DNS

RPZ A records were parsed as address redirects, but the query pipeline treated the address as a CNAME target and returned the wrong result. Answer IP-literal redirects directly with the matching A or AAAA record, and return NODATA for other query types.

Add the requested EdgeRouter domain overrides as a local RPZ source so each bare owner covers its apex and all subdomains. Mount that source into the pods and document the address-record form. When the Zones page has no existing zone, start the Add Record form in New zone mode and tell the operator to enter its apex.

deploy/k8s/kustomization.yaml

@@ -12,6 +12,7 @@ resources:
   - 00-config.yaml
   - 05-serviceaccount.yaml
   - 06-zones.yaml
+  - 07-rpz.yaml
   - 10-deployment.yaml
   - 20-service.yaml
   - 30-ingress.yaml