chg: dev: Consolidate the validator's DS fetches into one helper

Internal cleanup with no change in resolution behaviour. The DNSSEC
validator started DS record lookups from three separate places, each
set up slightly differently; they now go through a single helper.

Merge branch 'ondrej/validator-ds-fetch-zonecut' into 'main'

See merge request isc-projects/bind9!12144