feat: fail fast on wrong password for non-TTY start

[kentbull]

• Cleaned up many verbose comments.
• Cleaned up deprecated logfile check.
• --no-prompt added, which defaults to True when not sys.stdin.isatty() so no prompt comes up even when the passcode is specified but wrong (see setupHby). This closes a gap to make sure fail fast occurs for non-TTY startup even on wrong passcode.
• Cleaned up ordering of one of the tests, added a second test for the noPrompt behavior on incorrect passcode for encrypted keystore.

[dhh1128]

Folded into bug-238-witness-logging via fast-forward (so this PR shows as merged). One follow-up commit layered on top: 18d563d moves the --logfile deprecation notice to after ogler.reopen(), so Logging to {ogler.path} reports the resolved log path rather than the pre-reopen one. All the fail-fast/--no-prompt changes and the new non-TTY wrong-passcode test are accepted as-is; 13/13 kli command tests pass locally. This propagates up to WebOfTrust#1477.