git_open_cloexec(): use fcntl(2) w/ FD_CLOEXEC fallback