Fix recognition of commit-ids to restrict to 'existing' commit ids

When adding Prout to gu-who, I found that part of the CRSF token on the
homepage was being picked up as a commit id!