Web UI: zone naming and reverse zones, ACL suggestions, record form

- New zone dialog: choose Domain or Reverse zone. Reverse zones are
  created from a network and their name is generated; both kinds show the
  exact zone name and flag likely mistakes (addresses or URLs as names,
  host-like names, duplicates in the view, parent/child zones, networks
  off the octet/nibble boundaries) before anything is submitted.
- Record form: clears every field but the type after an add; shows the
  record exactly as it will be stored and warns about unqualified names.
  In reverse zones it takes an address, defaults to PTR, suggests host
  names of A/AAAA records with that address and warns about a second PTR;
  the record list shows addresses.
- Address match lists (options, view match lists, ACL elements) offer the
  existing ACLs, TSIG keys and built-ins as one-click suggestions and
  flag unknown names.
- Server: in reverse zones a record can be named by its address, and a
  PTR target like nas.example.com without the final dot is read as the
  full host name (a bare label is refused). Warnings noticed while parsing
  record data reach the result again.
- Fixes: brand link hover underline, the dashboard's "New zone" link
  opening the dialog twice.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

README.md

@@ -103,11 +103,16 @@ these pages:
 * **Statistics** (when enabled): queries over time, failed answers, a
   weekday x hour heatmap, top names and clients, and breakdowns. Every chart
   has a table view.
-* **Zones**: list, create (fields adapt to the zone type), per-zone records
-  with inline editing and type-specific hints, settings (SOA, TTL, serial
+* **Zones**: list, create (choose a domain or a network, and the dialog shows
+  the exact zone name it will create and warns about likely mistakes;
+  fields adapt to the zone type), per-zone records
+  with inline editing, type-specific hints and a preview of the exact record
+  that will be added (reverse zones take addresses and suggest host names), settings (SOA, TTL, serial
   policy, view), options, the generated zone file, and pasting a zone file
   to merge or replace records.
-* **Views, ACLs, TSIG keys, Server options**: the options editor knows every
+* **Views, ACLs, TSIG keys, Server options**: wherever an address match list
+  is entered, the existing ACLs and keys are offered and unknown names are
+  flagged. The options editor knows every
   BIND 9.20 statement for the scope and shows its description, grammar and
   a value field that fits it.
 * **Changes**: pending edits with the diff, named-checkconf output and