Lots of good suggestions. The down side to a pc running opnsense is going to be electricity costs. If that’s a concern.
Any of the Asus routers supported by Merlin will do what you need. (That’s what I’m currently doing). It has a feature called DNS control that will intercept DNS lookups and send them to the servers you define.