Unbind agent tunnel from node

Remove tunnel binding from the node, revoke the agent certificate issued on bind, and shut down the node's active tunnel if there is one. Succeeds also when the node has no bound tunnel. Requires MANAGE_AGENT_TUNNELS system access right.