plugins.git: use short commit IDs instead of full SHA1