Make BRM saves atomic

BRM saves currently just write and sync and move on to the next file of the trio. If one of the three fails there is no rollback. We need to make writes atomic by using symlinks that can be switched to new files and a state file to mark when the switch is complete.

If we find a state file in existence at the next checkpoint we know something is bad and can abort at that point before any further damage is done.