cli: Add a way to dis- and re-enable an endpoint with a known pubkey from summit

[ermo]

tarkah
For the builder description, it wasn't something we persisted before and its sent during enrollment so you need to remove the builder from summit & recreate the builder.
We have no way to remove builder from summit yet, but I can ssh in an nuke them from the service DB which should do the trick. Then on the builders just nuke their state.
That's something we should ticket - a way to un-enroll / remove an endpoint in summit & then the downstream needs to know to re-enroll if summit gives it a 403 or w/e