Require confirmation before applying down migrations

For safety reasons, this MR adds a validation that requires explicit user confirmation before applying down migrations. Alternatively, a -f/--force flag can be used to bypass confirmation.