feat: Add support for GitHub rulesets.

These allow us to block branch creation in the upstream. This could be
accidental where a repo maintainer pushes to `TokTok/$repo` instead of
their fork.

This is in addition to branch protection rules that apply only to
`master`. No branch protection is applied to other branches, but only 2
bots are currently allowed to create branches other than `master`.

admin/BUILD.bazel

@@ -1,15 +1,15 @@
 sh_test(
-    name = "settings_test",
+    name = "repos_test",
     size = "small",
     srcs = ["@perl"],
     args = [
-        "$(location settings_test.pl)",
+        "$(location repos_test.pl)",
         "$(location //:.gitmodules)",
-        "$(location settings.yaml)",
+        "$(location repos.yaml)",
     ],
     data = [
-        "settings.yaml",
-        "settings_test.pl",
+        "repos.yaml",
+        "repos_test.pl",
         "//:.gitmodules",
     ],
 )

admin/push

@@ -4,4 +4,4 @@ SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" &>/dev/null && pwd)"
 
 set -eux
 
-bazel run //hs-github-tools/tools:hub-settings -- "$SCRIPT_DIR/settings.yaml" "$@"
+bazel run //hs-github-tools/tools:hub-settings -- "$SCRIPT_DIR/repos.yaml" "$@"