Heroku API: use sha as version, allow overriding it