Sync internal fork

[klaustopher]

• Automatically sync dev and all release/* branches daily into the internal fork
• Restrict all other actions (where it makes sense) to only run in opf/openproject not the internal fork.
• Unfortunately, dependabot does not allow conditionals, so we will have to live with it opening PRs on the internal fork