admin restore utility for superusers

addresses long-standing Case:34696

let's you hit /hq/admin/phone/restore?as=someuser@domain and view that users ota restore payload.
this is only available to superusers.
supports the additional "since", "version", and "state" params as well