move SSHFileReferenceImpl to api module

Is a very simple implementation, and is still used by the interface, but
is now able to be shared by the client so that it can avoid reinventing
this part