The final resting place of the cup of Christ is the ‘holy grail’ of religious tourism. But hundreds of sites claiming to be home to it, who’s right? And is it real?