feat: add full Zonemaster stack with Docker and Spanish UI

- Clone all 5 Zonemaster component repos (LDNS, Engine, CLI, Backend, GUI)
- Dockerfile.backend: 8-stage multi-stage build LDNS→Engine→CLI→Backend
- Dockerfile.gui: Astro static build served via nginx
- docker-compose.yml: backend (internal) + frontend (port 5353)
- nginx.conf: root redirects to /es/, /api/ proxied to backend
- zonemaster-gui/config.ts: defaultLanguage set to 'es' (Spanish)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

zonemaster/test-zone-data/DNSSEC-TP/dnssec16/no-cds.cfg

@@ -0,0 +1,46 @@
+    # no-cds.dnssec16.xa
+    template IN SOA no-cds.dnssec16.xa. {
+        answer "no-cds.dnssec16.xa.	3600	IN	SOA	ns1.no-cds.dnssec16.xa. admin.no-cds.dnssec16.xa. 2022790777 3600 600 604800 3600"
+        answer "no-cds.dnssec16.xa.	3600	IN	RRSIG	SOA 10 3 3600 20321214142720 20221217132720 42228 no-cds.dnssec16.xa. D49hScgCQB1/wga+FVtA/I9WAqckKomvLRRT42Y6EIuiSN0gYITeQIXj v1uXAl1iowclydZmJqKvYk/OdYGelZAdxQaoMM0SR8V6Sp6bF7J75/YM atUyckXohltrXfDppuWFOgpKvStUN5tOvz0+MKAdSEKT9Ik+6+IjkVsO TdSxr2uuZyDti2riJbNczEe0uUboYAxniwt33VsA3HeS5860niCnw6BH hJdasnjZGXDnzue0j4mlXXn57h6QB57+Q3gVPaGwas69xQwY+yqq9UVO JDmBHax6aTPkIv7JQjrexIh3YkgKXIyRZ0u+O1U1ZwUjFl7OgQNdUaTI 4NV9+w=="
+    }
+
+    template IN NS no-cds.dnssec16.xa. {
+        answer "no-cds.dnssec16.xa.	3600	IN	NS	ns2.no-cds.dnssec16.xa."
+        answer "no-cds.dnssec16.xa.	3600	IN	NS	ns1.no-cds.dnssec16.xa."
+        answer "no-cds.dnssec16.xa.	3600	IN	RRSIG	NS 10 3 3600 20321214142747 20221217132748 42228 no-cds.dnssec16.xa. VaRgcXfSCysW5UAq1pjUgOhJBdyXIUPxpINOHbiivG0/s8Zvom2xWfQj uTi3zBRNT3dbI8zyfWIfUlv6fk121LjFCHjEGQe0U6LnzkMZDtbVwWwx 4oTufv2N0DccIQ6DB9CysyezqgckkvExoMrl4o0NnkWB+V2TlQT94VZO bHU+5oG97C6QfnUKVn84RQCdBUzR+IuBnclUrLBOdaI3Vd1Ju3ztUiS1 h5XqFoqh6FCdfAmYDh38+wsdBsB1eRw5L5C+3pH8VbXnm/0TSGJ1gIYW BKCaxUP0eR0o3qwYDsm4OASIBTiaxjWFOHkYg5Zp31DGsGRDJzklHDWl S2tD+w=="
+        additional "ns1.no-cds.dnssec16.xa.	3600	IN	AAAA	fda1:b2:c3:0:127:15:16:31"
+        additional "ns2.no-cds.dnssec16.xa.	3600	IN	AAAA	fda1:b2:c3:0:127:15:16:32"
+        additional "ns1.no-cds.dnssec16.xa.	3600	IN	A	127.15.16.31"
+        additional "ns2.no-cds.dnssec16.xa.	3600	IN	A	127.15.16.32"
+        additional "ns1.no-cds.dnssec16.xa.	3600	IN	RRSIG	A 10 4 3600 20321214142747 20221217132748 42228 no-cds.dnssec16.xa. IpFZMuOV8fvPsKW6mwxGfmQwc+3WxG7TT96ER6gRk5Wx5O01YJ6cBCqg jMOUlUk5vx+zERkAk9Fq7OFJWDiBN5tkDvcs2BVcSpzCL+fnDjCcEaFV UXWoO+HOSrFR44ilCxSCDk0lFmzDtYEqxJh/yFIr0jKXCkunERdG0VDh j6PfsACsr+5rYyma7RO6fybigCuvXp6EkI1EiszMlgfK+6K9pq79KB4P OGDRsFOIY3jp470MdSdHvtbr+tAfyONBMK1hCBc5wHiVCjjM6KnsPqsq wUj/u6FFupe71zXxob7IX6UOTorR3bl8CDxhnQdE0F9hC1gVEcDIK7vq UKrysw=="
+        additional "ns1.no-cds.dnssec16.xa.	3600	IN	RRSIG	AAAA 10 4 3600 20321214142747 20221217132748 42228 no-cds.dnssec16.xa. JK/uJxlQF29fy9KkK/kIH/TBjw2/kPgA0MQhEwKzZL75nu94qYPQbaVB M88gMarJrxtoiXCQ3VAHbl2YkVxFoC4eO2YjEBvuh8fmy1B7sPH9kaY0 pN9nJNI8DXhLzYrqcAgsQDU9xcSWnH1Lfxak75iK4d4AukqIkhWuMPdW pUmHayWu8INm2BLC6b8wIO6Mp93JS1NhbswoKsrkPViXBwRLKX2uTrTW zP5OfbSi6ttshHzGR+kzKI0Z6Ki8M6QpuCDC1VUt46XMMYJ2lwr3+du+ fUJgAbxAHl/6WYM+cE0MS//cd3sWzVpIG+UGohEE98MSYW9TKVc+Dl3g GV6yyg=="
+    }
+
+    template IN DNSKEY no-cds.dnssec16.xa. {
+        answer "no-cds.dnssec16.xa.	600	IN	DNSKEY	257 3 10 AwEAAaff0Wog4B3mCm2uRe/QZQQmEWYCH+X8iILcSFiPExsEm06sY3Xl /dAMM/i4whcYQCARYEe1U5Ff+DtWPOni4w4sJCQPJkHWMO5hJwcjmzdj jPlQXe9zuNBwXG+IbnO44mQpMJq1xA0rG55z7po+e70ZD0YUa7qorgyk 8RS4GsTHHfoeHcCrrxbuu+hiIGjiYIBIGUs4VL4j+SeMVo+34F6Lfpsd 0NQFfmTq6vHpLg9yBqIib/pghdusQ5rJpPfaWaM7JHMCGvZ03w2r9z18 U5OPYO8VVWECE/Z37tPmRMtVU1W8cEM/GmUNHhm0Uunv1Qt8x1JOGf3+ ImyLGNEcifM="
+        answer "no-cds.dnssec16.xa.	600	IN	RRSIG	DNSKEY 10 3 600 20321214142922 20221217132923 42228 no-cds.dnssec16.xa. WFG1N7hRtDtsIsVpWTFrgk6m1JTP63zRKg4JeSXv0CYrbuuI2ckxqFm9 QnocKTv8NMNifkpFHqJMKqYMxnz+WWWW6Kcvzpj22fjC4HL9LLx3I+/D 7Fz9gH6rpVTSeqoz6uvOPVWAPd3fO/i8uw80GmlEuu7CIPBcrMN4bXfC 48mpx0E8/L5141P8fe7khX3qNyYLXHO/nWpxpm2b0Lig08u2l474yqN/ K5ctYDA5L18yzJw/qbBmF1BNX3q4rtdDD6xxrxiKFyWxdOobTc9iJ8L/ /HwiblDYiGNtW5tXfJtxOI5x1O94rebkPnZ1ku41l2NCzTpiEtlWnrCf MqWyjg=="
+    }
+
+    template IN CDS no-cds.dnssec16.xa. {
+        rcode NOERROR
+    }
+
+    template IN A ns1.no-cds.dnssec16.xa. {
+        answer "ns1.no-cds.dnssec16.xa.	3600	IN	A	127.15.16.31"
+        answer "ns1.no-cds.dnssec16.xa.	3600	IN	RRSIG	A 10 4 3600 20321214143047 20221217133048 42228 no-cds.dnssec16.xa. Yrm6MMtBJpnzWE88Xfx/kKHy97pCtxoiVOG1UDrGgIMLxfyaOZnp7f54 zG7ksqnUOWW0g/OSeO59k43qH9UxJR5bUygGX/AoXeo0SrX6JbIHCzaW PV3zA5Nn7mJasZsdvLElYwI4vH30j9r3Kt/Lo0/FffYkKB108fTSmy/6 2/cl/9Y8+FoclDVDArUGCKSIRVySH0eTbSBnnQ5XWMlap7Ie0wZg1GrZ SdmImlt9pHgqrpCfeegzyJ5FWAi3aUhwEn8Z03cn6/a2hDAw31LPM4vx L2W4q5lJosUyDNPQ1hh3F10mlrwfQ4zAlm9EN2RqlZAf86l581yxgugb 4ScB7g=="
+    }
+
+    template IN AAAA ns1.no-cds.dnssec16.xa. {
+        answer "ns1.no-cds.dnssec16.xa.	3600	IN	AAAA	fda1:b2:c3:0:127:15:16:31"
+        answer "ns1.no-cds.dnssec16.xa.	3600	IN	RRSIG	AAAA 10 4 3600 20321214143114 20221217133115 42228 no-cds.dnssec16.xa. GBkRKA5v+lfpfEzlcOu5nxHl6mOGyegOK/B2wbbecLl7FgVaJJAuJBMR /+oPuYz7TGt8F+BdVcNJvpEQQbj8UkY783Lgf26/LJCCydw4RUR8IltW Vi+Jb9j1QWiEdhcByfOuko6nqfXvDkjSh6wKRh0a4lrTaHa4yohWUp9k CUwvzVZuuLCYh823r4XDwquv1A7aBgjLPsRRi1/3z6PvM2vK6/yVPXLf +fG0CiYkXZAk4aLY9biuya9iu6qNapLN619hMLVrAJscHrkYZSWKtvmy xRyEjqPPG0ag6fDZ5w6DGRaueLjm3oBnhBylZhPujcShg6svYcOQepXg ANr8oQ=="
+    }
+
+    template IN A ns2.no-cds.dnssec16.xa. {
+        answer "ns2.no-cds.dnssec16.xa.	3600	IN	A	127.15.16.32"
+        answer "ns2.no-cds.dnssec16.xa.	3600	IN	RRSIG	A 10 4 3600 20321214143141 20221217133142 42228 no-cds.dnssec16.xa. fCpPNF93phaXrmsTD5SLUzGgAZXgu9D+/JLahAMhgV3MD4L99HH12iTY 5Bwj6340nYn4bltTTVBH20WNPbDNAM+6HhwKLOynR6vd7E5/4XlN6mYK dqTqrw4NGQNRyGMQMJAhv7151/1CbcFzUcYtr3qlffEsnDik0o2Res8O RhCHCRmYuqa3ZzHkL3OU4iv77VNbwgb/BS2nmEdh/+bG5DtvU8xna4/r uj3imoSAFgadxkv+dYoEPQfPW1oyuKzxEBdZ1HNx6/dWtKZCQOi9ns4/ Xg6WXwuiOI3lBDuxG4gln2pgS3lk06PnYhGB8FDezPb8UpugMYsppjST po7Opg=="
+    }
+
+    template IN AAAA ns2.no-cds.dnssec16.xa. {
+        answer "ns2.no-cds.dnssec16.xa.	3600	IN	AAAA	fda1:b2:c3:0:127:15:16:32"
+        answer "ns2.no-cds.dnssec16.xa.	3600	IN	RRSIG	AAAA 10 4 3600 20321214143204 20221217133205 42228 no-cds.dnssec16.xa. fmfan1xICqXZ3ms0RpBtevnVcb18pheZy6YbDgBgKAIMmir3YVExyglk WyyLuoU7yrT2R8iOtteyH/5pGchmWRUzET01PFNbYeyAD0d966af+5pd S6HvTmAh59XwhTDBfI79gHgrQJT/6RC2iDljlcRvYbXdPgn1cyolGsiB SQtKKq0REGbWHbeSrscilP/eDCMuuppucE3T0V1RCnn6U2y1Rzs3l50F od1hvMDMf6FRWVYxyFwtZvQYuxdxpc+veeW6gf8Flvloke+n3dxPgyC3 fHPh9kIs8xwa+wDvwAic5VhSadaSqISjZ8wu+2NKGdYFdPKuvGYyD1Pe ik6OWA=="
+    }