rplint: fix duplicate STEP numbers

Who knows how they were handled before… 🤷

sets/resolver/iter_badraw.rpl

@@ -18670,7 +18670,7 @@ SECTION ANSWER
 ENTRY_END
 
 ; this is the correct answer
-STEP 40060 REPLY
+STEP 40070 REPLY
 ENTRY_BEGIN
 MATCH opcode qtype qname
 ADJUST copy_id

sets/resolver/iter_formerr.rpl

@@ -54,7 +54,7 @@ SECTION ANSWER
 ENTRY_END
 
 ; this is the correct answer
-STEP 60 REPLY
+STEP 70 REPLY
 ENTRY_BEGIN
 MATCH opcode qtype qname
 ADJUST copy_id

sets/resolver/iter_tcbit.rpl

@@ -56,7 +56,7 @@ SECTION ANSWER
 ENTRY_END
 
 ; this is the correct answer
-STEP 60 REPLY
+STEP 70 REPLY
 ENTRY_BEGIN
 MATCH opcode qtype qname
 ADJUST copy_id

sets/resolver/module_hint_static.rpl

@@ -30,7 +30,7 @@ SECTION QUESTION
 4.3.2.1.in-addr.arpa. IN PTR
 ENTRY_END
 
-STEP 20 CHECK_ANSWER
+STEP 40 CHECK_ANSWER
 ENTRY_BEGIN
 MATCH all
 REPLY QR RD RA NOERROR

sets/resolver/module_policy_rpz.rpl

@@ -104,7 +104,7 @@ SECTION QUESTION
 nic.cz. IN A
 ENTRY_END
 
-STEP 60 CHECK_ANSWER
+STEP 55 CHECK_ANSWER
 ENTRY_BEGIN
 MATCH all
 REPLY QR RD RA SERVFAIL
@@ -115,14 +115,14 @@ ENTRY_END
 
 ; matches  *.nic.cz CNAME rpz-tcp-only.
 ; TC flag expected
-STEP 50 QUERY
+STEP 60 QUERY
 ENTRY_BEGIN
 REPLY RD
 SECTION QUESTION
 dummy.nic.cz. IN A
 ENTRY_END
 
-STEP 60 CHECK_ANSWER
+STEP 65 CHECK_ANSWER
 ENTRY_BEGIN
 MATCH all
 REPLY QR TC RD RA NOERROR

sets/resolver/val_nsec3_b1_nameerror.rpl

@@ -138,7 +138,7 @@ a.c.x.w.example. IN A
 ENTRY_END
 
 ;cached answer
-STEP 20 CHECK_ANSWER
+STEP 40 CHECK_ANSWER
 ENTRY_BEGIN
 MATCH all
 REPLY QR RD RA DO NXDOMAIN

sets/resolver/val_ta_sentinel.rpl

@@ -407,7 +407,7 @@ root-key-sentinel-not-ta-48409.test. IN A
 ENTRY_END
 
 ; query without AD must SERVFAIL as well
-STEP 322 QUERY
+STEP 321 QUERY
 ENTRY_BEGIN
 REPLY RD
 SECTION QUESTION
@@ -494,14 +494,14 @@ root-key-sentinel-is-ta-00000.test. IN AAAA
 ENTRY_END
 
 ; +CD must disable sentinel logic
-STEP 423 QUERY
+STEP 424 QUERY
 ENTRY_BEGIN
 REPLY RD CD
 SECTION QUESTION
 root-key-sentinel-is-ta-00000.test. IN AAAA
 ENTRY_END
 
-STEP 424 CHECK_ANSWER
+STEP 425 CHECK_ANSWER
 ENTRY_BEGIN
 REPLY QR RD RA CD NOERROR
 MATCH opcode rcode flags question answer

sets/resolver/val_ta_sentinel_insecure.rpl

@@ -363,7 +363,7 @@ SECTION QUESTION
 root-key-sentinel-not-ta-48409.unsigned. IN AAAA
 ENTRY_END
 
-STEP 322 CHECK_ANSWER
+STEP 323 CHECK_ANSWER
 ENTRY_BEGIN
 REPLY QR RD RA NOERROR
 MATCH opcode rcode flags question answer

sets/resolver/val_ta_sentinel_nokey.rpl

@@ -348,7 +348,7 @@ SECTION QUESTION
 root-key-sentinel-not-ta-48409.test. IN AAAA
 ENTRY_END
 
-STEP 322 CHECK_ANSWER
+STEP 323 CHECK_ANSWER
 ENTRY_BEGIN
 REPLY QR RD RA NOERROR
 MATCH opcode rcode flags question answer

sets/resolver/val_wild_pos_multi.rpl

@@ -167,14 +167,14 @@ ENTRY_END
 ; retry with DNSSEC enabled
 
 ; recursion happens here, we expect NODATA wildcard proof
-STEP 101 QUERY
+STEP 131 QUERY
 ENTRY_BEGIN
 REPLY RD DO
 SECTION QUESTION
 ns. IN TXT
 ENTRY_END
 
-STEP 102 CHECK_ANSWER
+STEP 132 CHECK_ANSWER
 ENTRY_BEGIN
 MATCH all
 ADJUST copy_id