commit-graph: verify root tree OIDs