Here is my patch for this issue. With this patch h:commandButton and h:commandLink can be rendered outside a h:form, however h:commandLink is only rendered as SPAN and with a warning message (like in mojarra).
The patch changes some method signatures in HtmlButtonRendererBase and HtmlLinkRendererBase to reduce the calls to findNestingForm(). Unfortunately I don't know if this is a problem for tomahawk. Please let me know and I'll change the patch.