Handle multiple NSEC3PARAM records in tests

The dnssec system test failed when there were multiple NSEC3PARAM records in the zone. This happened in https://gitlab.isc.org/isc-projects/bind9/-/jobs/3898340 Extract the already reviewed and approved commit 1a52dccd from the back port and treat it as a seperate issue.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information