unbound: drop option msg-buffer-size
This was making unbound unable to transport larger DNS messages even over TCP! Normally 8k is enough, but I see no sufficient reason to limit it this way, especially as Turris devices have lots of RAM. The option was apparently inherited from old openwrt examples 11b8a2ad.