providing hash (or branch) in project.yml (FOO-commit) should not require repository.yml

[sjanc]

This will make it much easier to import external repos