Fix intermittent memory leak in dns_resolver unit

A rdataset could have been left unassociated on the error path in the resume_dslookup() in the dns_resolver unit. Clone the rdataset after the error check, so it's not cloned before we check whether we can make further progress chasing DS records.

Closes #3736 (closed)