Check resource record headers, RDATA bounds, TXT string lengths, and SOA
integer fields before consuming them. Propagate name decoding errors and
reject compression pointer loops instead of returning invalid addresses
or raising Lua exceptions. Preserve existing A/AAAA length errors.

Add 18 regression cases for malformed records, all response sections, and
valid records. The record bounds and mock suites pass 376 assertions.