Move environment-variable checking into fs-mistrust

With this set of changes, we no longer need so much special-case logic in arti-client and arti to override the fs-mistrust in the configuration: instead we can just have the right value wind up in the configuration.

Closes #483 (closed).