Run lints against changed VCS files once (#2093)

We're currently running the lints against changed files twice, causing
some output lines to be duplicated.

Switch to `git ls-files`, which can list files in the index and the
working (staged and unstaged), as well as unignored untracked files.