NS / glue consistency checker

Compares the NS records the parent zone (TLD) reports against the domain's own authoritative NS records, and flags glue issues.