Allow stack upgrade --git to take a SHA1

[ndmitchell]

For building Stack release candidates, it would be great to stack upgrade --git=MY_SHA1 so everyone can try the same candidate. This probably generalises the existing --git-branch flag.

[mgsloan]

Good idea! PRs appreciated. Also it should take any ref, not just shas.