Function ensure_git_clean 

pub fn ensure_git_clean(repo_root: &Path) -> Result<()>

Fail fast if the working tree is dirty.

Error message is pinned by the CLI snapshot tests: "git working tree is not clean; commit/stash changes or use --allow-dirty".