sha1-file: allow check_object_signature() to handle any repo