Just some minor changes to more rigidly define the pairing requirements and behaviour. A secure implementation still needs https://git.card10.badge.events.ccc.de/card10/firmware/-/issues/74
Mainly to ease development ATM
Not that it really matters much at the moment as we allow bondings at any point in time, but this will hopefully change soon.
