builtin-reflog.c: don't install new reflog on write failure