rust-tuf doesn't support diamond delegations

While writing a delegation builder, I noticed that while we have a test for diamond delegations, it doesn't actually work. Consider this delegation tree:

 targets
 /     \
A       B
 \     /
    D

Where D is signed correctly by B, but not signed correctly by A.

Both Client::lookup_target_description and Client::target_description_with_start_time will visit:

• targets
• A
• D (error, A did not sign D. marking as visited)
• B
• skip D since it was already visited.

We need to update these delegations as visited only if we decided the delegation is trusted.

Start with the diamond delegation integration test in tuf/tests/integration.rs, then trace Client::lookup_target_description in tuf/src/client.rs and Client::target_description_with_start_time in tuf/src/database.rs. Verify how delegations become visited when a signature check fails, and update the behavior so D can be considered through B after A does not trust it; the existing diamond delegation scenario should then work correctly.