fix: Enforce verification key integrity check regardless of TRUST_PARAMS=1

[placer14]

closes #6640

See change in filecoin-project/go-paramfetch#17 for details.

[placer14]

Please check that I did the module dependency dance properly. A go mod tidy seemed to reverse the update to go-fetchparam which was not what I expected (as it is neither unused or missing).

Edit: Nevermind. CI led me to salvation with a handy go mod download <package> which seemed to make it "formally used".

[codecov]

Codecov Report

Merging #7327 (b681078) into master (aab42dd) will decrease coverage by 0.00%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##           master    #7327      +/-   ##
==========================================
- Coverage   39.14%   39.13%   -0.01%     
==========================================
  Files         614      614              
  Lines       64997    64997              
==========================================
- Hits        25440    25436       -4     
- Misses      35143    35155      +12     
+ Partials     4414     4406       -8     

Impacted Files	Coverage Δ
markets/loggers/loggers.go	89.28% <0.00%> (-10.72%)	⬇️
chain/actors/builtin/miner/diff.go	48.52% <0.00%> (-10.30%)	⬇️
chain/events/observer.go	71.64% <0.00%> (-6.72%)	⬇️
chain/stmgr/execute.go	86.95% <0.00%> (-4.35%)	⬇️
node/hello/hello.go	63.63% <0.00%> (-3.41%)	⬇️
extern/storage-sealing/fsm.go	56.22% <0.00%> (-1.21%)	⬇️
extern/sector-storage/sched_worker.go	77.97% <0.00%> (-0.73%)	⬇️
chain/store/store.go	64.37% <0.00%> (-0.71%)	⬇️
node/impl/full/chain.go	14.16% <0.00%> (-0.58%)	⬇️
chain/consensus/filcns/filecoin.go	51.33% <0.00%> (-0.45%)	⬇️
... and 9 more

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update aab42dd...b681078. Read the comment docs.

[placer14]

Holding this PR as I now realize the dependent package could be squash-merged causing the commit SHA to change. I'll ready this again once the dependent PR is merged and SHA updated.