Add AD-Legacy zone fallback for --add-dns-record

[Q2Flc2FySec]

Currently, --add-dns-record only attempts to create DNS records in the AD-Domain partition (DomainDnsZones). This fails on environments where DNS is stored in the AD-Legacy partition (CN=MicrosoftDNS,CN=System).

This PR adds a fallback mechanism: if creating a record in the AD-Domain partition fails, it automatically retries against the AD-Legacy partition. The duplicate-check and subsequent NS record creation (for wpad) are also aware of both partitions to ensure consistency.

Changes:

• Define dns_base_dn_legacy alongside the existing dns_base_dn
• Extend the existing-record check to cover both partitions
• Wrap A record creation in a fallback: AD-Domain → AD-Legacy
• Track which partition succeeded (active_dns_base_dn) so the NS record is placed in the same location