Split-DNS resolution works on one VPN reconnect and breaks on the next

The VPN is up, yet the resolver chooses the wrong upstream for one internal zone because link-domain priority drifted after connection recreation.