io: better error handling when writing stuff out

also have the output stream support writing to temporary file
and do renameat/unlinkat on close depending on if all writes
succeeded or not.