git: Remove external calls to git.ExecSafe
Created by: ryanslade
Remove all uses of git.ExecSafe from outside vcs/git
.
To ensure it can't be used, we also unexport it. This change is part of a move to isolating "raw" git commands to a single package.
Closes https://github.com/sourcegraph/sourcegraph/issues/28181