files-backend: avoid ref api targeting main ref store