wasm32 (wasi and js) friendly

I think the main blocker is `trust-dns-resolver` (which is also outdated)

How about feature-gating DNS and making that an optional step consumers could resolve before finalizing the dkim verification, which wouldn't need tokio or any networking code?