tor-guardmgr: Add more tests for vanguards

This MR improves the test coverage for the vanguard code paths. It adds

• a test that checks that the VanguardMgr handles vanguards.json state files correctly
• a shadow test involving a hidden service that uses full vanguards

This also fixes a stub circuit selection bug that only happens if vanguards are enabled (see #1417 (closed)).