Add a release-managers automation job

I think I'm ok with letting this run every 3 hours along with the upstream-merge job.

Also reduces some duplication around SSH setup that's shared with that job.