Make bundle cleanup ask before removal

- Prevent `brew bundle install --cleanup` from removing packages unless
  ask mode or an explicit force cleanup path is used.
- Share the ask confirmation helper with install, upgrade and bundle
  cleanup flows so prompts behave consistently.
- Keep generated help and completions aligned with the safer cleanup
  contract.

Signed-off-by: Patrick Linnane <patrick@linnane.io>