Move KeySamplerCLI and KeyVersionFetcherCLI to tools package