Run git commands separately so shebang would work

[nafg]

currently we put the git commands + the CI commands into a temporary file and run it with sh -x -e. This breaks #! shebangs.

Instead, run the git commands as their own process. Then set the working directory when running the script.