Configure branch protection on stable branches

[ekohl]

We should configure the project to not allow force pushes to "X.Y" & "master" branches.

Originally posted by @maximiliankolb in #2644 (comment)

I've created an empty rule for branches matching *.* which should prevent force pushes.

The question is, how far do we want to go with this? We can also mandate a PR, but that prevents cherry picks as we do them today.

[maximiliankolb]

Thanks for creating this rule.

I think preventing force pushes on stable branches is the perfect balance; preventing cherry-picks would really impact my workflow.

IMHO we can close this issue with "done" but lets hear other options too.

[ekohl]

I'll note I didn't test this because of the risk. I'd like to keep it open and discuss this during the next docs meeting.

[adamlazik1]

I also think preventing force pushes and allowing regular pushes is a good balance.