Bring back git ls-remote

This PR adds some great features:

- does not count towards the rate limit
- no more paging (multiple requests)
- private repos work just fine even on travis (with https://token@github.com/some/repo)
- changed some unused `ref` keys. removed: `ref.url` & `ref.object`. added: `ref.sha`