Run the catalog zone update as an offloaded work

Running the catalog zone update as an offloaded work should help with observed service interruption during large catalog zone updates (see #3744 (closed)). A similar change has been earlier implemented for request policy zones (RPZ) (see !5938 (merged)), which has many internal code similarities with CATZ.