feat: replace isTrusted

[andy-haynes]

This PR replaces the isTrusted flag with an object under trust to accommodate more complex loading strategies in the future. Fixes #72

Before:

<Widget isTrusted ... />

After:

<Widget trust={{ mode: "trusted" }} ... />

The options in the current implementation are implemented here as values for mode: sandboxed or trusted. In the updated implementation (#73), Components without a value specified are assumed to be sandboxed.

As part of this PR I've also included a trust-author trusted-author trust mode, which treats all Components as trusted if they have the same author as the Component loaded with this trust mode. However explicitly indicating sandboxed mode overrides this blanket trust for individual Components and their descendants:

{/* Root Component  */}
<Widget trust={{ mode: "trusted-author" }} src="ex.near/widget/Parent" />


{/* Parent Component  */}
<>
  {/* ✅ same author - trusted  */}
  <Widget src="ex.near/widget/X" />

  {/* ✅ same author, explicitly trusted - trusted (**descendants of Y authored by ex.near will still be trusted**) */}
  <Widget src="ex.near/widget/Y" trust={{ mode: "trusted" }} />

  {/* ❌  same author, explicitly sandboxed - sandboxed */}
  <Widget src="ex.near/widget/X" trust={{ mode: "sandboxed" }} />

  {/* ❌  different author, no trust specified - sandboxed */}
  <Widget src="mal.near/widget/X" />
</>

We can merge this without trust-author trusted-author, I've included it here because:

• the implementation was pretty simple
• it will be very useful for debugging

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
bos-web-engine	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Oct 9, 2023 6:12pm

[mpeterdev]

We can merge this without trust-author, I've included it here because:

I am a fan of including that out of the gate 👍

[andy-haynes]

StateDemo rewritten to use trust={{ mode: "trust-author" }} for the trusted path: https://bos-web-engine-git-feat-trust-prop-near-developer-console.vercel.app/andyh.near/widget/StateDemo.TrustAuthor?isDebug=true