Verify repository is the same on upgrades

Only show upgrade for packages where the installed repository matches
the repository of the available package.

Closes atom/settings-view#92
Don't send atom.io token to github.com

Previously this was doable since the tokens worked in both places