state self-serve config BE

[isabeleliassen]

• attestations stay in source code
• compact admins enable each jurisdiction in each environment
• states add state data
• add all jurisdiction scopes upfront
• config cannot be removed
• a state cannot be removed from an environment
• compact and state can both toggle on/off for live