[9.18] Add a lock for dns_catz_zone_t

Backport of !7633 (merged).

Merge request reports