packaging-updates: Fix the update pipeline ref for -securiry, etc.

When an update is available for buster-security, we currently attempt to trigger a pipeline on the debian/buster-security-gitlab-update-job branch, which does not exist.

We instead want to trigger it on debian/buster-gitlab-update-job, so trim everything after the first - from the branch name.