lib/resolve: correct EDNS padding logic for failures

The main problem was that SERVFAILs were not padded;
the recovery of answer->opt_rr has to happen before answer_padding()
25 jobs for padding-misc
in 4 minutes and 54 seconds and was queued for 6 seconds