bump perf: don't call git for remotes on every repo for every dep
bump perf: don't call git to check every tag parent

This relies on adding "no-parent" to every voom tag of a commit that has no
parents.  Is is nearly free at tagging time and saves multiple git calls for
every dep at bump time.