add agent switch over plan/task [SOLARCH-542]

[abuxton]

Use Case

Module focuses on clean fresh install it would be great to also provide replatform support starting with agent switch over as 80% of the time we just build new masters anyway.

Describe the Solution You Would Like

task and simple ssh script to apply to an agent that follows cert regen and repoints at new dns entry for master/ compiler LB pool.
associated plan to handle signing new cert with flag to negate when autosign is in use.

Describe Alternatives You've Considered

puppet plan with apply based task

Additional Context

[reidmv]

Related: https://github.com/fervidus/puppet_ca_utils/blob/main/tasks/configure_agent_trust.rb