store the full sha in VERSION_COMMIT

Also bump the short commit length from 8 -> 9 chars. We have one
collision at 8 chars.