Avoid single point-of-failure for our GeoIP domain

We don't want mirror.pkgbuild.com's DNS server to be a single-point-of-failure, so this commit adds multiple authoritative DNS servers for the zone. The extra DNS servers are run on the geomirror servers.

The _acme-challenge zone, used for obtaining certificates, is run solely on mirror.pkgbuild.com's DNS server, to avoid syncing DNS records between the servers (KISS).

roles/archweb/defaults/main.yml

@@ -13,7 +13,7 @@ archweb_domains_templates:
 archweb_allowed_hosts: ["{{ archweb_domain }}", 'ipxe.archlinux.org']
 archweb_nginx_conf: '/etc/nginx/nginx.d/archweb.conf'
 archweb_repository: 'https://github.com/archlinux/archweb.git'
-archweb_version: 'release_2022-04-12'
+archweb_version: 'release_2022-04-14'
 archweb_pgp_key: ['E499C79F53C96A54E572FEE1C06086337C50773E']
 archweb_site: true
 archweb_mirrorcheck: false