document pdns.DROP for recursor, add policy-drops metric for it