ci: use public repo main for accurate diff base calculation

Avoid using `origin/main` from the local mirror, which may be outdated.
Instead, fetch main from the public repo and compute `merge-base` from it,
ensuring consistency when comparing against `FETCH_HEAD` from the MR.

Signed-off-by: Leandro Belli <leandro.belli@arm.com>