filter-branch: use require_clean_work_tree