Potential for bad refs from import #2594

xref #2449 (comment)

I think we can improve this so we don't link the ref into the repo until after diff_id validation. Otherwise if we have an untimely crash / power loss a retry of the operation is going to see the potentially bad ref and blindly try to use it.