Count a file that says nothing as trusted, and drop the refusal date

The fourth review (hq issue 339): the safe reading of a file that asks for a
setting and does not say is that root or a consumer trusts it, so its
settings are the terminal's; `"trusted": false` is the opt-out. With that,
nothing unsafe is left to refuse: `module check` lists and counts the
unmarked files and never refuses them.

internal/catalogue/terminal_settings_test.go

@@ -138,14 +138,16 @@ func TestTerminalKeysAreDerived(t *testing.T) {
 	power := Manifest{Module: "power", Resources: []map[string]any{
 		{"id": "logind", "type": "file", "path": "/etc/systemd/logind.conf.d/power.conf", "trusted": true,
 			"content": "HandleLidSwitch=${setting:handle-lid-switch}\n"},
-		{"id": "note", "type": "file", "path": "/var/lib/power/note", "trusted": false, "content": "${setting:greeting}\n"}}}
+		{"id": "note", "type": "file", "path": "/var/lib/power/note", "trusted": false, "content": "${setting:greeting}\n"},
+		// Unmarked counts as trusted (fail closed): only `"trusted": false` lets a verb change what a file asks for.
+		{"id": "unmarked", "type": "file", "path": "/etc/power/unmarked", "content": "${setting:unmarked}\n"}}}
 	for _, c := range []struct {
 		m    Manifest
 		want string
 	}{
 		{postgres, "places,accesses,port"},
 		{keycloak, "places,accesses,issuer,token-path"},
-		{power, "places,accesses,handle-lid-switch"},
+		{power, "places,accesses,handle-lid-switch,unmarked"},
 		{Manifest{Module: "plain"}, "places,accesses"},
 	} {
 		if got := strings.Join(TerminalKeys(c.m), ","); got != c.want {