security: use traversal safe os.Root for FS operations#1222

evict merged 3 commits intomainsourcegraph/src-cli:mainfrom

vr/servegit/use-traversal-safe-apisourcegraph/src-cli:vr/servegit/use-traversal-safe-apiCopy head branch name to clipboard