Change `debops-padlock` to using sub-commands.

Currently, only `init` is implemented.

Please note: This is an incompatible change. To get the previous behaviour,
one needs to call `debops-padlock init` now.