Add bootstrap command

This command creates the GCS bucket and KMS keys automatically with the
properly scoped minimal permissions instead of relying on gcloud/gsutil.
This makes for an easier getting started experience, especially for
users who may be unfamiliar with the platform.