Fix DescribeCommand with multiple match options when multiple match options are given in git describe the result must not depend on the order of the match options. JGit wrongly picked the first match using the match options in the order they were defined.
Fix git-describe tie-breakers. Correct behaviour as git 18.104.22.168 is to resolve tie-breakers to choose the most recent tag.
[Security fix] Fix that AdvertiseRefsHook was not called for git-upload-pack in protocol v0 stateless transports, meaning that in Gerrit using AdvertiseRefsHook for validation wants were not validated and a user could fetch anything that is pointed to by any ref (using fetch-by-sha1), as long as they could guess the object name.