`santactl doctor` should report discrepancies between sync state and config profile

[mlw]

Having the doctor command report discrepancies would help users more quickly identify why config profile settings are not getting applied.