Rollback to timestamp

We should have a feature to roll back to a certain point in time. The use case are:

• undo a failed, large operation (for example upgrade, migration, installing a package),
• on a copy of the repository, switch to an old state for reading old content
• recover from a corruption (for example corruption due to incorrect "discovery" state, such as concurrent async index updates).