chore(ci): Set up default rulesets for default and release branches

[asf-gitbox-commits]

This Pull Request enables the repository to conform with the "sane default security settings" of the Apache Software Foundation by configuring a default branch ruleset that protects the default branch and any release branches.

Note that ~DEFAULT_BRANCH is a GitHub symbolic link to the current default branch (HEAD) of the repository and does not need changing.
If the managing project does not wish to set up these defaults, please close this Pull Request. Alternatively, the project may merge this Pull Request to apply the changes immediately.

If no action is taken, this Pull Request will be automatically merged by the Apache Infrastructure team on 2026-06-14 (30 days from now).

For any further information, please reach us on Slack or at: users@infra.apache.org

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 43.10%. Comparing base (51bb04a) to head (30c838b).

Additional details and impacted files

@@            Coverage Diff            @@
##               main    #5080   +/-   ##
=========================================
  Coverage     43.10%   43.10%           
- Complexity     2207     2208    +1     
=========================================
  Files          1045     1045           
  Lines         40249    40249           
  Branches       4252     4252           
=========================================
+ Hits          17348    17349    +1     
- Misses        21829    21830    +1     
+ Partials       1072     1070    -2     

Flag	Coverage Δ
access-control-service	39.53% <ø> (ø)
agent-service	33.72% <ø> (ø)
amber	43.78% <ø> (+0.01%)	⬆️
computing-unit-managing-service	0.00% <ø> (ø)
config-service	0.00% <ø> (ø)
file-service	32.18% <ø> (ø)
frontend	34.05% <ø> (ø)
python	90.40% <ø> (-0.03%)	⬇️
workflow-compiling-service	47.72% <ø> (ø)

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[Yicong-Huang]

Thanks. Merge to test if rulesets can work.