Move upsteam CI to separate file

We then just trigger salsa-ci as downstream pipeline

This makes is a bit simpler to expand and we avoid triggering salsa-ci too often.

While at that add a type checking job and collect the test results.

Signed-off-by: Guido Günther agx@sigxcpu.org