Replace default suffix .invalid with .internal

[sjpb]

In July 2024 ICANN agreed .internal as a reserved TLD which will never appear in the global root. This is a better match to the intent for the default value for cluster_domain_suffix than the current value .invalid, which was the only suitable choice at the time.