Add branch protection #432

It would be great to be able to enforce the use of pull requests on my knot, similar to GitHub's branch protection rules. This can get complex, but just making it impossible for myself to accidentally bork my own repo by forgetting by pushing to main on accident would be great. The lack of this will also make it a nonstarter for me to introduce tangled at work, for example