Add DNS zone transfer check phase

[exorrtech]

Description\nAdd a DNS zone transfer attempt phase before subfinder.\n\n## Requirements\n- Implement axfr check against target nameservers\n- Integrate into pipeline before subfinder phase\n- Report successful zone transfers as high-severity findings\n\n## Notes\nGood first issue — follow the existing phase pattern in the codebase.