fix(deisctl): refresh-units isn't a fleet client command

The `deisctl refresh-units` command will error if `DEISCTL_TUNNEL` is set to an invalid URL, even though no SSH connection is needed in this case. This PR moves it out of the client interface into a refresh.go file in the main package.

Fixes #2061.