Reject outdated firmware versions

Add a mandatory (imho) security check - *all* third party implementations should at least do that (ideally fetch an always up to date list from mytrezor)