Ipset by domain using Luci

It's not OpenWrt version-related, it's a dnsmasq-version related. With dnsmasq versions which do not support nft sets, the ipset option makes dnsmasq populate specified ipset, not nft set.