sync to unbound 1.18.0; heavy lifting by sthen

sync to unbound 1.17.0; heavy lifting by sthen

Import bits from (lib)unbound that we need for unwind(8).

This is probably too much but allows us to keep in sync with
usr.sbin/unbound to be able to easily apply updates.