Node-local DNS cache serves NXDOMAIN for a Service that was created moments later, and one node keeps the bad answer through the rollout

The Service exists now, but one resolver path still trusts the earlier negative cache result.