read_loose_refs(): treat NULL_SHA1 loose references as broken