What's needed for MVP?

[TomHennen]

@michaelwinser asked what 's needed to move this from PoC to MVP?

Thoughts:

• Workflow security. E.g. pinning, etc. (e.g. run zizmor and fix problems, maybe other issues)
• Improve onboarding experience. Creating the policy is too difficult. It's too difficult to create the repo policy #127