feat: add scripted actions updates

[Mossman1215]

requires tweaking branch protection rules
api docs https://docs.github.com/en/rest/branches/branches?apiVersion=2022-11-28#sync-a-fork-branch-with-the-upstream-repository
we'll need to allow the github actions bot to force push these repos (github-actions[bot]@users.noreply.github.com)

• GeoNet/setup-ko
• GeoNet/setup-crane
• GeoNet/chainguard-dev-actions
• GeoNet/golangci-lint-action
• GeoNet/conform-actions
• GeoNet/chainguard-images-actions
• GeoNet/terraform-linters-setup-tflint

list from this api
gh api --paginate -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" '/orgs/GeoNet/repos?type=fork' | jq -r '.[].full_name

[Mossman1215]

Part of #14368

[quiffman]

Suggested change

	/repos/OWNER/REPO/merge-upstream \
	/repos/${FORK}/merge-upstream \

[Mossman1215]

tried in my own namespace and the actions user can't do the changes required

ah crap
gh: Resource not accessible by integration (HTTP 403)
{"message":"Resource not accessible by integration","documentation_url":"https://docs.github.com/rest/branches/branches#sync-a-fork-branch-with-the-upstream-repository"}