Add probe_dns_flag_ad metric

[Zash]

This adds reporting of the Authenticated Data flag, indicating whether the resolver thinks the resource is properly signed with DNSSEC. Hopefully useful for monitoring DNSSEC status.

Ref #551