db-mode config changes apply live in-process

settings and upstream writes now follow a prepare, commit, publish, retire
contract: candidates are built and validated before the database transaction,
published as infallible pointer swaps, and old generations retire after their
readers drain. per-query policy values snapshot once per query; upstream pool,
cache, rate limiter, sessions, api limiter, log sink, blocklist scheduler and
the query-log queue each gained one named live operation. restart_required
shrinks from every scalar key to the bind keys and web.enabled; the admin ui
drops its restart notices for everything else. file mode is unchanged.

src/server/resolver_integration_test.zig

@@ -26,6 +26,7 @@ const types = @import("../dns/types.zig");
 const health = @import("../upstream/health.zig");
 const pool = @import("../upstream/pool.zig");
 const transport = @import("../upstream/transport.zig");
+const upstream_owner = @import("../upstream/owner.zig");
 
 const testing = std.testing;
 
@@ -42,11 +43,10 @@ const forward_timeout: std.Io.Clock.Duration = .{
 /// An upstream and nothing else optional: no filtering, no cache, no log. The
 /// listeners and the pool are what this test exercises, so the handler is the
 /// same bare one its own tests use.
-fn bareHandler(client: transport.Client) handler.Handler {
+fn bareHandler(up: *upstream_owner.Owner) handler.Handler {
     return .{
-        .upstream = client,
-        .blocking = blocking,
-        .forward_read_timeout = forward_timeout,
+        .upstream = up,
+        .policy = .{ .blocking = blocking, .forward_read_timeout = forward_timeout },
     };
 }
 
@@ -275,7 +275,9 @@ test "the whole resolver answers over udp and tcp and fails over to a healthy up
     };
     var upstreams: pool.Pool = .init(&entries, test_cfg, pool_timeouts, 1);
 
-    var h = bareHandler(upstreams.client());
+    var h_owner: upstream_owner.Borrowed = .{};
+
+    var h = bareHandler(h_owner.client(upstreams.client()));
 
     const listen_address: net.IpAddress = try .parse("127.0.0.1", 0);
     var udp = try udp_server.UdpServer.bind(gpa, io, listen_address, &h, .{ .max_in_flight = 4 });