Bogus SERVFAIL and Test updates

Closes #35 and maybe even #28 (for second part, doesn't check cd).

Changes:

• JS Recursive Resolver: Add bogus flag to ResolveContext and set it when verification breaks
• Unbound Resolver: Use the bogus flag that unbound sets in result for same behavior
• Tests: Add tests for bad dnssec domains dnssec-failed.org and rhybar.cz (taken from https://www.internetsociety.org/resources/deploy360/2013/dnssec-test-sites/)

Also fixes tests (I can split it into a separate PR if needed):

• proof-test.js: iis.se is no longer weak, changed to false
• stub-test.js: mail.google.com doesn't have a CNAME, so replaced it with onedrive.live.com
• KSK 2010 -> KSK 2017 in tests
• Updates root.zone in test/data/ with latest from https://www.internic.net/domain/root.zone
• Updates test data for com.
• Updates tests with new sizes, etc.