check for filesystem boundaries and prevent recursion

We don't do this today, but we should. While crawling, if the candidate directory has a different device major/minor to the root, we should treat it similarly to a symlink; we can record the node itself, but never recurse into it (and prune its children off if it transitioned from a regular dir to being a mount point for something else)