Restructure AdGuard Home settings by nesting DNS-related options under a `dns` key. Add `mutableSettings = false` for better NixOS management. Update upstream and bootstrap DNS servers to Cloudflare and Quad9. Adjust system nameservers for testing.