Docs: performance & intended-use note — every lookup is a fresh, uncached round-trip (slower than a warm OS resolver), so cboxdk/dns is for freshness/transparency (domain verification, diagnostics, forensic inspection, DNSSEC), not a high-throughput hot-path resolver. No code changes.