Ask user for confirmation before git checkout -- <path>

Since this discards all local changes irreversibly, it's too easy
to fat-finger in that clumsy menu and needs a confirmation.