Trezor trims its reseller network after Ledger supply-chain attack