fix: refuse vaults without a verifier

Unlock now always checks the verifier, so an empty vault can never
accept a wrong master password and the 'verify against the first entry'
fallback for Go/older vaults is gone. A vault without a verifier is
refused with a message naming the file to remove (SEC-20261012-016).
The Go vault fixture and its test go with it.

rust/core/tests/fixtures/README.md

@@ -5,7 +5,6 @@ Generated by the last Go build of Alchementary Link with `cmd/genfixtures` (see
 
 - `link.db` — a database through migration 006 with every protocol, a known host, a snippet,
   IRC channel state and preferences.
-- `vault/vault.json` — a vault whose master password is `correct horse battery staple`.
 - `profiles.link` — an encrypted export with password `export-pass`.
 - `recordings/rec1.cast` — an asciicast v2 recording.
 

rust/core/tests/fixtures/vault/vault.json

@@ -1,8 +0,0 @@
-{
-  "version": 1,
-  "salt": "uiC19v2mCz7XglOtlQwJgDe80p37X5XueedOqm2Av+w=",
-  "secrets": {
-    "profile:00000000-0000-0000-0000-000000000001:password": "MknPyD86GxFdJZipFyhRL8YiqkywXMP7JxD5PuVjgblss2zuloQ=",
-    "profile:00000000-0000-0000-0000-000000000001:totp": "DDeIJ7scepaK9ctzh46JDRuB9XRfMG7BMfDnqkwsMEuGdW6blJTddiJVVi4="
-  }
-}