filter-branch: use hash-object instead of mktag