git source plugin can introduce non-determinism

Summary

When cloning the git repository at Source.stage() time, we are not making any effort to ensure that the staged files have deterministic file attributes.

As far as I can see, similar to issue #527 (closed), the checkout will result in file permissions which depend on the user's umask.