Previously, trying to load `SignedRefs` for any given remote would result in a fetch failure. Teach the fetch to be more resilient by pruning remotes that result in an error when loading `SignedRefs`, and add the error to the validation failures.