Systematic security setting across Jupyter GitHub orgs

[consideRatio]

It could make sense to review the Jupyter project's various GitHub organizations security settings:

• Enforce use of 2FA across Jupyter's orgs #93
• Enforce use of secure 2FA across Jupyter's orgs #97
• Enforce the "GitHub Recommended" security configuration #102 (resolves Enable GitHub feature to report vulnerabilities privately #73)
• Default to least permissions in GitHub workflows in all orgs #92
• Enable GitHub feature to report vulnerabilities privately #73

[rpwagner]

@consideRatio absolutely, this is exactly how we can ensure the base level of security across all of Jupyter's GitHub repos. I can confirm that all of the Jupyter GitHub orgs have 2FA enabled.

[Carreau]

See #88 as well, that tries to check some settings for all the repos. I'd love to have a set of tools that audit a large number of orgs/repos.