Noob question: Is it safe to mix Pulumi code with code that interacts with the resources? I'd like to create a GitHub repo and push some generated file with

git push ...

. But those files wouldn't be tracked by the pulumi state. Would this work? Or would pulumi freak out if I try to do

pulumi destroy

on the drifted repo later? I'd love any resources that show someone trying to accomplish something similar

Have you looked at the Command provider? This lets you shell out to other commands within the resource lifecycle graph.