Add ability to serve module versions by git commit ref

the git commit ref could be obtained during indexing and then git redirection could redirect to the commit ref. This would add further protection from tag rewriting