We pass the service's `project` as an env var when pushing, so that we can do
access checks. As we are pushing to the source project, that should be our
context for rebasing.