I wonder if this is at all related? Clients not connecting, not blocking - #13 by RamSet
The solution was to nuke everything on the Pi, which I'm hoping to avoid. It really just feels like the router is blocking DNS traffic, but I can't verify it or figure out why/how.