Add and use safe-checkout to clean before co in .voom-repos
Warn about use of dirty working copy, even when allowed.
Allow use of dirty working copy in build-deps

This was necessary to build hiccup-bridge, apparently because of a checked-in
native dep in target.