fix: both irmaserver and irmaclient now early reject session requests referring nonexisting identifiers

feat: Breaking change: support conjunctions of disjunctions of conjunctions when requesting attributes in any of the three supported session types

Instead of requesting several attributes, one can now request several groups of attributes. Within each such group, attributes belonging to the same credential type always come from the same credential instance. This affects all three session types, as in each of them attributes can be disclosed.

When disclosing two attributes from the same credential instance, irmaclient would disclose both attributes twice.

chore: Add unit_tests build flag to filter out integration tests. Moved helper methods from session_test to main_test.

Co-authored-by: Confiks <confiks@scriptbase.org>