add audit command

[dickhardt]

While developing, it is useful to just get the status of one account.

"command": "audit",
"sub": "xxxx",
"tenant": "yyyy"

[dickhardt]

including "tenant" in the response is redundant since the "sub" must be unique across the issuer.