Fix validate-except syntax: semicolon after last list entry

The resolver validate-except list (#251) omitted the trailing semicolon
after the final entry, so named fails config parse
(named.conf: missing ';' before '}') and the resolver pods crash-loop.
BIND requires every entry in the list to be semicolon-terminated,
including the last one before the closing brace.

apps/base/bind-internal/resolvers/cluster.yaml

@@ -29,7 +29,7 @@ spec:
   # insecure so they are not validated. unkin.net covers all *.unkin.net
   # (incl. k8s.syd1.au.unkin.net); 18.198.in-addr.arpa covers every reverse zone.
   extraOptions:
-    - "validate-except { unkin.net; 18.198.in-addr.arpa; consul }"
+    - "validate-except { unkin.net; 18.198.in-addr.arpa; consul; }"
   resources:
     requests:
       cpu: 20m