systemd-resolved split DNS sends the internal domain to the public resolver

The name exists internally, yet queries leak outward because the resolver policy is bound to a different interface than the app actually uses.