Confirmation modal for /install <package> --package in the TUI.
Arbitrary packages have no curated allowlist to vet against, so installing
one pulls in third-party code. Rather than forcing the user to re-run with
--force, this non-blocking modal asks for explicit confirmation before the
install runs. --force (or --yes) still bypasses the prompt.
