1.21.9 auto-sync build #254

Fix branch discovery picking up a bogus upstream/HEAD entry

git for-each-ref over refs/remotes/upstream included the auto-created
HEAD symref, which got parsed into a fake "upstream" branch name and
crashed the checkout. Use ls-remote --heads against the actual remote
instead so only real branches are ever considered.