Jobs should fail if they leave the repo dirty

[maximlt]

I think a job should fail if it lets the repo in a dirty state after it has done its work. That would be done adding an additional step at the end of the job, or before the deployment step if it has one. Maybe something like:

git diff --quiet || exit 1

This is important to ensure that when developers run the tests, build the site or the packages, they don't end up with undesired files.