Add tap trust commands

- Provide `brew trust` and `brew untrust` so users can manage tap,
  formula, cask and external command trust without editing JSON.
- Record the current default trust decision with an env hint so users
  can prepare for required tap trust later.
- Add `HOMEBREW_NO_REQUIRE_TAP_TRUST` for callers that need the old
  loading behaviour explicitly.