Stabilise trust list spec

- Avoids filesystem-backed trust state for a pure command output
  expectation.
- Keeps coverage focused on how `brew trust` lists stored entries.