this modifies the migration order CI check to only check for added files by: 1. Escaping the blob we give to git, so bash doesn't perform expansion, this lets git handle the blob matching, which for reasons I don't fully understand allows to find file renames. 2. Applying `--diff-filter=A`, which makes git only list file additions.