Support creating and modifying repos

There are a few TODOs in here which I plan to address, but opening to get feedback on the approach so far.

ping @titanous 
Is a `tuf sign timestamp` needed before this or is it implicit?