download: add back rm .git folder
to make dl/ tarballs reproducible, we need to delete the .git folder of them.
otherwise, they contain time built data, and bloat from unused branches.
This is needed due to the commit 605adb10 for forcing verification of local tarballs.