Seems to go like this:
- locate on souce.puri.sm
- create fork in gitlab
- gbp clone
- gbp pq import
- setup git attributes
- add salsa repo as remote
- git merge <debian tag>
- rebase patches
- create MR
- add source.puri.sm blessed repo for future updates (or to push a signed tag)
- ...
- push signed tag
with good metadata this could be automated since the upstream fork could be located and added and we could at least have the repos setup by default