configure main branch protection

[eddycharly]

• Require a pull request before merging
  • Require approvals
  • Dismiss stale pull request approvals when new commits are pushed
  • Require review from Code Owners
• Require status checks to pass before merging
• Require signed commits
• Require linear history
• Do not allow bypassing the above settings