Communication to pypi.python.org is not allowed on Trusted Runners
currently. This change vendors all needed dependencies.

This change adds two CI jobs, diff and apply to manage Trusted Runners
and projects inside GitLab, without the need to checkout and execute
the script locally.

The script to assign Trusted Runners to other project used the old
project_id to query Trusted Runners. This change updates the project
id to 339, which is this project.