CLI: two new firmware commands - "trezorctl firmware download" and "trezorctl firmware verify"