Rethink the tor-keymgr error types

This issue is about fixing all error-related TODO HSS from tor-keymgr (for example, there are places where we return internal! errors instead of an appropriate error (sub)type).