Update branding on cert sorter dir moniter event

Check current branded name to verify we dont need
to update it.

Make cli import start up a cert sorter before
writing certs, to trigger brand checks, since
'import' does not use the certlib ent cert
installing path.

Add more logging, more tests.