pr-auditor: set status on ref instead of sha

Created by: bobheadxi

This should prevent subsequent pushes from reporting a "pending" status from this check.

Test plan

Open PR, pre-merge passes.

Push to PR, pre-merge still marked as green.