nip5: validate npub/nsec

[guaka]

• when user adds npub: check that user can sign an an event with the matching nsec
• may be a bit too much given current trustroots/trustroots maintenance mode, and clients should validate nip5, even though many (most/all?) don't currently do this