use safeRemoveDirSync when possible to avoid unexpected catastrophic directory deletions

[cscheid]

Closes #7998.

Note that Quarto will still fail to compile this because the parent directory configuration causes Quarto to attempt to cp -r a directory to a subdirectory of itself, which is nonsense. But at least we will refuse to rm -r project directories by accident.