request-pull: more strictly match local/remote branches