thanks! yeah, the interactive flow was really about making the
git-filter-repo invocation itself disappear — most of the actual work
(backup ref, verification, --force-with-lease instead of --force) is
just trying to make sure a "potentially risky" task doesn't also become
an unrecoverable one.