This breaks surprisingly little.

This is part of refactoring to handle NsConsensuses.

The major types are:
  * You implemented Into when you should have implemented From.
  * You sliced a slice when you didn't have to.
  * You said Ok(x?) when you could have said x.
  * You said Vec::new(); push(); push(); when you could have said vec![].

This is painful, but we shouldn't have to do it again.

A directory manager can now launch or run in read-only or read-write
mode, depending on whether it manages to acquire a lock on the
filesystem.

In read-write mode, it bootstraps and stores data into the database
as usual.

In read-only mode, it assumes that another process will be updating
the database, and so it only loads it periodically, looking for new
information.  However, it also tries to acquire the lock itself, so
it can enter read-write mode.

This function loads a current bootstrapped directory from disk, if
it can.

In C tor, this saved a whole lot of RAM.

This way we won't even try sending the CREATE2 cell unless the
Ed25519 identity we know for the channel matches the provided
CircTarget.

This lets us reinstate the code in dirclient that retired circuits
depending on the error type.

Also, remove references to DataStream, and comment on the future of
the module.

This is consistent with the other pieces of tor-proto, which do not
handle timeouts on their own.  It also lets us remove tor-rtcompat
as a dependency from tor-proto, and simplify some of the test cases
to use async_test.

This commit unindents a lot of test code; use git's "-b" flag to
read the parts that matter.

Now we don't need runtime-specific stuff in tor-chanmgr.