Add a scope for checking MergeRequstDiffCommit shas to ensure that the
pipeline ran for some historical state of the merge request. We have
encountered situations where only matching on project and ref produce a
false positive: https://gitlab.com/gitlab-org/gitlab/issues/201947