Make QA tasks more reliable
On #1342 (closed) there was confusion about whether an MR was deployed to production or not: MR widget claimed it was only on staging, whether the package referenced in the QA task was already deployed to prod. A further investigation showed up the MR was not part of the package and therefore was not deployed to production #1342 (comment 445790567)
From #1342 (comment 447243432)
QA tasks use a bit of a naive approach: Get the list of deployments to sorted by date descending, take the first two, and compares the two refs via the API.
To avoid these confusions in the future, it'd be great if we could make the QA tasks to be more reliable, that is to only show merge requests that are included in the package the task is referencing.