Add a setting to block Private / Reserved IP addresses in responses

### Prerequisites

- [X] I have checked the [Wiki](https://github.com/AdguardTeam/AdGuardHome/wiki) and [Discussions](https://github.com/AdguardTeam/AdGuardHome/discussions) and found no answer

- [X] I have searched other issues and found no duplicates

- [X] I want to request a feature or enhancement and not ask a question

### Description

#### What problem are you trying to solve?

For some users and usage environments, the usage of private IPs in DNS is required, however it does pose a security risk, therefore there needs to be an option for AGH to filter A/AAAA responses from upstreams that include Private and Reserved IP addresses

#### Proposed solution

Add a setting which when enabled, will convert any response with a Private / Reserved IP range inside into 0.0.0.0.

#### Alternatives considered

Considered using specific upstreams, however the limitation this brings is too considerable to ignore.

#### Additional information

N/A