mod_firewall: Initialize compiled chunk just once for all handlers This should fix a case where some stateful dependencies (such as throttles) produce separate instances for every call to new_handler(), leading to surprising behaviour (e.g. rules executed via JUMP CHAIN vs ::deliver would have separate rate limits). This also adds better error handling in case the compiled code fails to run for some reason.

Generate a DNS UPDATE order in format suitable for `nsupdate` based on
current port configuration.

Example output:

```
$ prosodyctl mod_dnsupdate -d example.com -t xmpp.example.com example.com
zone example.com
server ns1.example.com
ttl 3600
add _xmpp-client._tcp.example.com IN SRV 1 1 5222
add _xmpp-server._tcp.example.com IN SRV 1 1 5269
```