Warn if we are cleaning files that are tracked by Git

If automatic output cleaning tries to delete a file that is tracked by Git, then that's a good indication that the output glob could be too broad.

This could be more expensive than we want, since it requires calling out to another process and would block every script's execution. Maybe something to put in a `diagnose` mode, rather than something we do on every build.