Ensure to build the last commit of the expected branch for protected targets

[glehmann]

We don't check that the commit is in the remote branch, in order to avoid building from a commit in a PR that has been merged but is not the merged commit.