automatically cull oldest 25% of signatures

when cache size is reached
remove signatures from example notebook metadata
add counter to new notebooks in test_manager

ensures brand new notebooks are untrusted

previously, all new notebooks were identical,
so once one was trusted, they would all start trusted.