Add kit config to drive third party notice generation

[afoxman]

Building on the work Danny is doing in #150, I want to expose control over the CLI params through kit config. There should be sensible defaults as well, which are reflected in the config types and the CLI spec. Ideally, a kit dev would just run the cli without any params and either the defaults or the kit config overrides would be enough to run the whole thing.

We may also want a simplistic CLI command which checks for the need to update licensing. That would let kit developers add a block in their CI loops to ensure that devs updating packages also update licenses in the repo.