Rework germinate handling to put the temporary dir outside public_html

This avoids .new directories being picked up by rsync to the frontend
server, causing unnecessary delays.