repo transfer moves the directory before the record !380

The directory moves before the owner-update transaction, so a failed move leaves the record and the label/milestone fold untouched; a record that then fails moves the directory back. Stacked on !379. Closes #212.