bin/get-pick-list.sh: warn when commit lists invalid sha