refresh: allow failover even after IXFR has been completed

Zone content update is now executed within the requestor. This allows
failing over to AXFR in case IXFR finished but the zone changes
coudn't be applied from any reason.