Add CancelTrySwitch method to boot.Protocol
The rpi implementation of the boot protocol leaves the
tryboot.txt file on disk in case of a failed update. While harmless, this shows we have a hole in our API design. I think we need something that complements try-boot cancel or rollback in the failed path.