Function relay_pin_path 

pub fn relay_pin_path(data_dir: &Path) -> PathBuf

The relay outer-leaf pin store (<data_dir>/relay/relay_pin). Once recorded (explicitly or by TOFU) the bridge pins the relay’s outer cert, AND enrollment delivers this value to clients so they pin the same leaf (R-E contract).