* build: rewrite push-patch to use the github API instead of local git commits to ensure commits are signed
* again
(cherry picked from commit a21afc3e45d15f88c1f754d5990908f248909b41)
* use pr head ref
(cherry picked from commit 0edcc985fadcce64f01fb77b1c15653d5e66e864)
