knot-resolver: backport patch to resolve GNOME domains

This fixes issue described on our forum: https://forum.turris.cz/t/gnome-project-domains-inaccessible-with-dnssec-enabled/17272

I spoke with @vcunat, he told me that there is possibility that there should be new version of Knot Resolver next week, but let's fix this issue for now in HBK/HBL/HBD branches until there is a new release.

Patch is taken from this PR: knot/knot-resolver!1294 (merged)

Compile tested für Turris MOX, HBL