same for LDFLAGS. this fixes common problem where CFLAGS after make
was evaluated as a make variable and replaced the default, while
before as env variable and was prepended to the default string.
now they both behave as an env. variable

before the algorithm was happy with root hints for all queries starting
at root, however they're often overloaded and result in timeouts
the updated code provides SBELT only for root NS query lookup and tries
to use cached information as much as possible

previously it was always overwritten with SBELT for root + root TA
doesn't have to be in cache (it's in trust store)

refs #33

This reverts commit 0f9e615b.

the selected address is now an array with selection, caller can then send the same query to multiple offered targets

refs #35

this could happen if the query contained a CNAME with AA=0, or missing mandatory DS in previous NS query

example:
local rr = pkt:section(kres.section.ANSWER)[1]
print(kres.rr2str(rr))

example:
local rr = pkt:section(kres.section.ANSWER)
for i = 1, #rr do
	if rr[i].type == kres.type.A then
		print(kres.dname2str(rr[i].owner))
		print(‘rdlen:’, #rr[i].rdata)
	end
end

this is useful if we want to prefetch or update data
in cache, it doesn’t affect the lookup of closest known
zone cut