Use virtualised WASI filesystem to detect modified files

[Timmmm]

Linters should fail if any files have been modified, and currently we run git diff before and after running the linter to verify this. But instead we could just intercept writes to files and then verify that they don't change the contents. This should be faster.