add separate MonitorState field for the verified partial STH of the current batch
- move low-handling state-handling code into separate utilities and bunch them together
- force pending_sth > verified_sth and have _update ignore non-pending rather than assert pending
fix tests
- change the temporal consistency check to a full check since that's what we're now doing in the monitor