This patch increases CPU requests and limits for the DNS resolver pods
in order to improve response times. Currently the blocky process is
throttled in 20-30% of time, which is not ideal.

After deploying the blocklists, resolve times skyrocketed, probably due
to limited CPU time. The gain by blocklists is marginal, throughout the
past few hours just 2 dns resolutions have been blocked.

Given the major impact this has with minor benefits, reverting from the
usage of blocklists seems like the right move.

This reverts commit 2532a967.

This patch should integrate some upstream blocklists from pihole. This
is mainly an experiment, testing whether it's worth exploring these
blocklists further. Since quad9 should already take care of a lot of it,
it shouldn't matter too much.

This patch switches to the main image, which contains some bug fixes for
DNSSEC handling. Further we switch prefetch back on, as dnssec on
clients is currently disabled due to systemd related problems.

Also the newer build potentially fixed issues with prefetch dropping ad
flags as well.

After some investigation it seems that prefetch causes some issues with
DNSSEC it seems to drop the ad flag on a refresh. Therefore it's
disabled for now.

This patch fixes the current issues with Service Discovery by adding a
port to the service with the correct name for the ServiceMonitor, as
well as adding the missing network policy.

This patch is the first try of using blocky instead of adguard-dnsproxy
as dns resolver. The idea is to get better metrics from blocky as well
as supporting dns block lists if necessary.