Draft was eventually published as RFC 9276 but we did not update our docs. Also add couple mentions in relevant places in the ARM and dnssec-signzone man page, mainly around "do not touch" places.