Use ownership data to determine whether something is an "ospr"

[nedbat]

Today the bot decides a PR is an "ospr" if it is authored by someone outside of 2U. This has to be updated: a PR is an OSPR if it is in a 2U-maintained repo, and the author is outside of 2U.