Draft: Remove `before_script` generated `Pipfile.lock`

This MR adds git clean -f to the end of the before_script so that the repository is in a pristine state during dependency scanning.