remote.c: don't leak the base branch name in format_tracking_info