fixes for workarounds

The branches have already diverged too much, so targeting another PR: https://gitlab.labs.nic.cz/knot/knot-resolver/merge_requests/519

This fixes flags in some places read from global context and not from query flags, making them impossible to override in policy filters. It also allows some flags to survive CNAME hops. It also allows lame answers in PERMISSIVE mode, which fixes negative answers from F5 load balancers. Last thing is adding bindings to the checkout layer to be able to run policies before sending service queries.

changed title from Marek/fixes for workarounds to fixes for workarounds

changed the description

added 149 commits

• 2ea8c5a1...76681949 - 149 commits from branch cache-write-interface

Compare with previous version

changed target branch from cache-write-interface to master

resolved all discussions

enabled an automatic merge when the pipeline for 76681949 succeeds

Apart from the above comments, I just rebased it and squashed tiny nitpicks into the individual commits.

merged

mentioned in commit fc286788

added bug label

I somehow missed the kr_zonecut_find_nsname() orphan, which is what the "discussion" box just above is about. Fix: !605 (closed). /cc @pspacek.

mentioned in merge request !605 (closed)