See what would be changed when puppet is re-enabled

puppet agent -t --agent_disabled_lockfile=none --noop

Apply specific changes without re-enabling puppet

puppet agent -t --agent_disabled_lockfile=none --tags tag1,tag2

The tag name to use is after the /Stage[main]/ section

e.g. If the test run had this in the output

/Stage[main]/postfix/File[/etc/aliases]

The tag would be postfix, so you would apply it with

puppet agent -t --agent_disabled_lockfile=none --tags postfix

You can also apply tags to specific resources with the tag attribute