Check peers pubsub sub -> graft -> prune -> unsub cycle

[Menduist]

Currently, we allow unsubbed peers to graft us, and grafted peers to unsub. That's technically against the spec (should be strictly sub -> graft -> prune -> unsub)

Check the spec for clarity, other implementations to see what they do, and check that this doesn't lead to exploits in our implementation