build(deps): bump go-git to read git maintenance's loose-<hash> packs

Objects that git maintenance packed into loose-<hash>.pack were "not found", so a read-only turn listed every file under those trees as touched.