[prop220] Check all new certificate types (incl cross-cert and ed25519)
If we're using ed25519 authentication, we should understand and check all the relevant certificate types when they're presented in the CERTS cell.
Partially implemented in my work-in-progress #15055 (moved) branch.