Un-dangle dangling objects in object pools

Closes #1716 (closed)

This adds a defense in depth against git prune accidentally removing objects from a pool repository that are still used by a member repository.

We should never run git prune in a pool in the first place, but we can't stop people (sysadmins) from doing it. Because data loss is bad it seems reasonable to me to have this extra defense.