Update consul dns blocker deps

set the service to depend on the
dns_blocker for non-bootstrap nodes.

this sets the dep at the actual resource
level so that we don't have to worry about
getting bitten by containment.