Simplify Project#protected_for? to only use full refs

After we make sure we're only sending full refs to Project#protected_for? we should simplify the implementation and only support full refs.