start-builds and update-outcome are vulnerable to out-of-disk

If there is nearly no disk space free, start-builds and update-outcome will write partial json files. Partial json files are invalid. These invalid json files typically replace existing, valid json files.

One solution would be to use atomic writes, where the file is written first, then renamed into place on completion. This would prevent invalid files from being written.