Preflight access key provisioning state

[decofe]

Summary

• reintroduce provisioned as a positive cache only, defaulting false and serialized only when true
• preflight keychain state before charge/session payment dispatch
• set provisioned = true only after the on-chain preflight confirms the key is active
• attach stored key authorization on the initial payment when the key is confirmed missing or preflight cannot confirm active state

Validation

• cargo test -p tempo-common keys::model --lib
• cargo test -p tempo-common keys::keystore::tests::test_mark_provisioned_address_only_updates_matching_chain --lib
• cargo check -p tempo-request

Prompted by: @deodad

[github-actions]

⚠️ Changelog not found.

A changelog entry is required before merging.

Add changelog