update hooks: add --one-file-system to all `rm -rf` calls

If people happen to have bind mounts in dirs that get deleted, make sure
our `rm -rf` calls don't walk into them and accidentally delete other
things.  Instead we want to have the build fail and cause people to
recover themselves.

BUG=None
TEST=`for f in * ; do bash -n $f ; done`

Change-Id: I3a31fd730281ffc0d7eebe19112963fbdc70dde3
Reviewed-on: https://chromium-review.googlesource.com/180094
Reviewed-by: David James <davidjames@chromium.org>
Commit-Queue: Mike Frysinger <vapier@chromium.org>
Tested-by: Mike Frysinger <vapier@chromium.org>
18 files changed