sha1_name: avoid quadratic list insertion in handle_one_ref