Resolve ambiguous references for archive metadata (backport)

What does this MR do and why?

Contributes to gitlab-org/security/gitlab#823

MR to 15.11: !116411 (merged)

Problem

It's possible to fetch archives for hidden references if user creates a tag/branch name that matches the reference.

Solution

Apply git logic to identify the priority of resolving the reference.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

• This MR is backporting a bug fix, documentation update, or spec fix, previously merged in the default branch. (see here)
• The original MR has been deployed to GitLab.com (not applicable for documentation or spec changes).
• This MR has a severity label assigned (if applicable).
• Ensure the e2e:package-and-test-ee job has either succeeded or been approved by a Software Engineer in Test.

Note to the merge request author and maintainer

The process of backporting bug fixes into stable branches is tracked as part of an internal pilot. If you have questions about this process, please:

• Refer to the internal pilot issue for feedback or questions.
• Refer to the patch release runbook for engineers and maintainers for guidance.