nss-resolve: fallback to the class NSS "dns" module if we cannot contact resolved

That way DNS resolution works both with and without resolved running.
update TODO