Only cherry-pick security merge requests targeting master
When stable and master
merge requests get merged simultaneously, it
was possible we'd attempt to cherry-pick all of them, which usually
ended up with failures due to empty changes, or outright conflicts.
Now we only attempt to cherry-pick those targeting master
into our
auto-deploy branch.
Closes https://gitlab.com/gitlab-org/release-tools/-/issues/416