Add `attestation-policy update` subcommand

[alec-w]

It isn't currently possible to update an attestation policy using the CLI. To make it easier to manage this capability should be added to the CLI.