Migrate unsafe update-ref `delete` without `<oldvalue>` to specify it
This originally started as a more narrow change, but I ended up changing the cleanup
service and delete_refs
to use the safe version of the API. They might now return errors that were previously hidden, but most likely not, and if they did it'll be a good thing.