Add command "ait install-unlocked"

We should distinguish between commands that work on a fresh new device from commands that require an unlocked device in boot mode. The latter should be initiated by "ait install-unlocked ..." rather than "ait install ...".