This MR introduces a commit-confirm mechanic for changes to ONDs. A change created in a pending-state. A commit of this change by the operator pushed the change to the given OND. If the commit is not confirmed within 10 minutes (default. Use the GOSDN_CHANGE_TIMEOUT environment variable to change the timeout) is is rolled back automatically.
