Add the opportunity to enforce a PR-based workflow
With this feature we are simply dropping all access to the main repo,
thus forcing all contributors to use a PR-based workflow.
In a world where we have CI on PR, this may be an interesting to turn on
and in dist-git this may be even more important.