mtc: Add option to fetch SPKI from bootstrap entry

[lukevalenta]

After #96, the /get-certificate endpoint requires that the caller passes in the unhashed SPKI in order to get a signatureless certificate. For testing, it would be convenient to fetch the SPKI from the bootstrap entry.

[lukevalenta]

Duplicated by #103