[git] make pull ff-only by default