Sanitize input for Build creation

The build ref should look like a git ref, and should not be anything that can cause ... whatever kind of injection attack works against DynamoDB