cli: Add artifact checkout subcommand

Artifact checkout has slightly different behaviour from checkout,
that is, either '--directory' or '--tar' are now required options.
This is a step towards allow checkout to take multiple args.