fix(adguard): resolve port 53 conflict

Change AdGuard Home DNS listener to bind to 127.0.0.1:5353 to avoid conflicting with existing services on port 53, since we only expose DoH via Nginx.

modules/adguard.nix

@@ -73,6 +73,8 @@ in
       port = cfg.port;
       settings = {
         dns = {
+          bind_hosts = [ "127.0.0.1" ];
+          port = 5353;
           upstream_dns = [ cfg.upstreamDoh ];
           bootstrap_dns = cfg.bootstrapDns;
           querylog_enabled = true;