b92235571c
Add branch protection to the openbao fork repository so main is protected: only the owner may push directly and other changes must land via a pull request that passes the fork build pipeline. - Add branch_protection for main (whitelist-push to the owner; require the ci/woodpecker/pr/build status check on PRs); set squash as the default merge