More resilient DNS resolution for monitoring checks

We hardened the internal caching DNS resolvers our monitoring nodes use, so a brief resolver load spike no longer produces false "DNS resolution failure" alerts. No new providers, resolution stays on our own Hetzner infrastructure.