trezorctl: support unlocking bootloader via `trezorctl device unlock-bootloader`.