`git_buf_copy_cstr` is called with user-input, and wants to sanity-check
that input.  Allow it to return a value if the input was malformed in a
way that we cannot cope.

`git_buf_sanitize` is called with user-input, and wants to sanity-check
that input.  Allow it to return a value if the input was malformed in a
way that we cannot cope.

ci: only report main branch in README status

ci: run coverity in the nightly builds

ci: more GitHub Actions

GitHub Actions is the present and the future.

Provide the base to our docker images and run with the QEMU docker
support optionally.

Add a ThreadSanitizer build

msvc crtdbg -> win32 leakcheck

Add missing worktree_dir check and test case

The win32 leakchecking system is now named win32_leakcheck.  Update the
allocator to match.

Move leak check initialization into git_win32_leakcheck_global_init, and
call it on library initialization.

msvc crtdbg is a mouthfull that is not particularly indicative of what
it does.  Let's rename it to "win32 leakcheck".

Fix the `-DTHREADSAFE=OFF` build

ci: propagate environment variables

ci: supply a token for self-hosted runners

ci: supply a token for self-hosted runners