914717: rct cat-manifest fails to report Contract from the embedded entitlement cert

rct does not use entitlement cert, but the json in the /entitlements directory.
that json did not include all the needed information for account, order, and contract.
previously generated manifests will need to be recreated to have this information included.
Changes to database update scripts
export consumer's identity certificate
change identity_certificate -> upstream_consumer
Add UpstreamConsumer model object
add new api to return list of UpstreamConsumers for an owner
add upstream_consumer table
Add uuid option to allow cpc to do exports.
Export upstream consumer information.
UpstreamConsumer does not map to a DB Owner.

The owner_id in UpstreamConsumer is the upstream owner id from where the
UpstreamConsumer originated.
import UpstreamConsumer
save web url and set upstreamCurator
switch to using json for exporting idcert and keypair.

Change prefix/hostname to be prefixWebUrl and prefixApiUrl.
add test for importConsumer (with sample data files)
protect against NPE
fix test to handle the new json for ConsumerDto
test keypair.pem to simulate files in a manifest
Export upstream consumer's KeyPair
fix PREFIX names
remove unused code