check_header_and_update_state: missing Header.height() vs Header.trusted_height check

[plafer]

Problem is here.

The tendermint-light-client's verifier doesn't ensure that Header.height() > Header.trusted_height, so we need to make that check in ibc-rs. In words, the trusted height (representing the height of the header already on chain for which this client update is based on) must be smaller than height of the new header that we're installing.

See equivalent check in ibc-go.