The sandbox cleanup routine that removes planted bare-repo files now preserves the HEAD file and the .git directory within those repos during the scrub pass.
Details
Previously all files were deleted recursively without exception.
Now HEAD and .git entries are skipped during the scrub, avoiding corruption of valid git metadata.
Evidence
si1() function (search for "[Sandbox] scrubbed planted bare-repo file")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
