dns: map evdns errors to OONI failures