Show a [bootstrap-foo] workunit only when actually bootstrapping.

Also make ivy write to a tmpfile to avoid a corrupted file from an
errored ivy invocation being considered present in a future run.