pkg/trust: fix directory handle leak in loadAndMergeConfig

The os.Open(dirPath) call opens a directory handle used for
Readdirnames() but never closes it, leaking one file descriptor
per call to loadAndMergeConfig().

Add defer dir.Close() after the error check.

Signed-off-by: Sebastien Tardif <sebtardif@ncf.ca>