Secret key transaction authentication (TSIG) RFC 8945 support for zone transfers

### Prerequisites

- [X] I have checked the [Wiki](https://github.com/AdguardTeam/AdGuardHome/wiki) and [Discussions](https://github.com/AdguardTeam/AdGuardHome/discussions) and found no answer

- [X] I have searched other issues and found no duplicates

- [X] I want to request a feature or enhancement and not ask a question

### The problem

Protocol for transaction-level authentication using shared secrets and one-way hashing. It can be used to authenticate dynamic updates to a DNS zone as coming from an approved client or to authenticate responses as coming from an approved name server. No recommendation is made here for distributing the shared secrets; it is expected that a network administrator will statically configure name servers and clients using some out-of-band mechanism.

### Proposed solution

Proposed solution:
https://datatracker.ietf.org/doc/html/rfc8945

### Alternatives considered and additional information

Possible related with:
https://github.com/AdguardTeam/AdGuardHome/issues/790