Fix: RustCrossSigning service API confusion (identity trusted vs own device trusted by identity)