fix(ci): concurrent cache access

Saving cache isn't instantaneous. Usually it takes about a minute.
If another job tries to restore cache at the same time, it fails
with the error "tar: Unexpected EOF in archive".

Now tar writes to a different filename with a random suffix, and then
renames it atomically.