pull-updates: Push all local refs atomically

Avoid ending up in a inconsistent state by ensuring that we push all the local refs (the debian/* branches, the upstream/* branches, their tags and the pristine-lfs branch) at the same time.