Exclude .only-qa jobs from all triggered pipelines

Using $TOP_UPSTREAM_SOURCE_PROJECT instead of $RELEASE meant that jobs that extend .only-qa were still included when triggered by deployer pipelines.