Move environment trust to floxmeta layer

[mkenigs]

We currently verify that an environment is trusted at activation time, for both remote environments and composition. This means the environment can be fetched even if not trusted.

We should instead move checking trust into the floxmeta layer in order to make sure we're never fetching untrusted environments