update system tests so validation won't fail when using IANA key

- all tests with "recursion yes" now also specify "dnssec-validation yes",
  and all tests with "recursion no" also specify "dnssec-validation no".
  this must be maintained in all new tests, or else validation will fail
  when we use local root zones for testing.
- clean.sh has been modified where necessary to remove managed-keys.bind
  and viewname.mkeys files.

bin/tests/system/synthfromdnssec/clean.sh

@@ -20,3 +20,4 @@ rm -f ns1/root.db
 rm -f ns1/root.db.signed
 rm -f ns1/trusted.conf
 rm -f ns2/named_dump.db
+rm -f ns*/managed-keys.bind*