pub fn load_trusted_keys(path: &Path) -> Result<Vec<TrustedKey>>
Reads a trust file holding either a single key or a { "keys": [...] } bundle.
{ "keys": [...] }
When the file cannot be read or is not one of the two shapes.