Authenticity proofs not bounded to their secure element on TS7

Trezor Safe 7 authenticity proofs were verified against a combined key set rather than per secure element, so a single valid proof could satisfy all three checks. Each proof is now bound to its own element.