sweepOrphanedKeys

Deletes every key in keyStore that none of the wallet's credentials is bound to — left by an issuance the app quit or crashed in the middle of, or one dropped without Issuance.close — and returns how many. Call it at launch, before any issuance or refresh: one in progress holds keys of its own.