Git "detected dubious ownership in repository": Fix It in Docker and CI Without Trusting Everything

Fix "fatal: detected dubious ownership in repository" in Docker and CI: when safe.directory is right, when it is a trap, and the safer alternatives.