nsec: correct wildcard proof check with queried for literal wildcard

The validation fails in current implementation when queried directly for the wildcard. In that case the count of the common labels with the NSEC record is the same, and not shorter by 1 (to accomodate wildcard expansion).