trust anchors: persist the state and timer

The format of TA store is compatible both ways with old kresd.
Note: it requires the parent commit to work, i.e. new libzscanner.
3 jobs for ta-improve
in 5 minutes and 13 seconds and was queued for 3 seconds