trust is stored in code_cell.metadata

not top-level code_cell
msgspec: stream.data -> stream.text
move mime-bundle data to rich output.data

from top-level output keys
only rich display outputs have metadata

even affects v3, which had some bugs that didn't describe actual js behavior
semicolons, you guys!
output[mime/type] -> output.data[mime/type] in javascript