Guard Jest runs against writing artefacts into the repo

[eleshar]

Ensure full Jest runs fail if any test changes tracked repo files, and route generated outputs to temporary dirs to keep worktrees clean.

[linear-code]

GIT-2377