Draft: git: Restrict spawned commands to a specific dir - v2

This is v2 of !6913 (merged) as it was recently reverted due to an issue. There are two changes from the original:

• We use the -C flag instead of spawning the Git process in a fixed working directory.
• The Gitaly and Praefect socket addresses are converted to absolute paths when building the config structs.