deploy: protect git checkout with -- in case someone has an idea to name branch \*