verify_dotfile(): reject .git case-insensitively