* Adds the new 2024 DNSSEC root anchor (and removes the old 2019 one
that far predates this software)
* Substantially improves the `Debug` readability for `NSecTypeMask`.
* Fixes an issue where proofs with duplicate records would spuriously
fail signature checks.
-----BEGIN PGP SIGNATURE-----