Require PRs and passing CI for commits to this repository

There's currently a bot that commits directly which means these branch protections security features cannot be enabled for this repository.

It would be ideal to have the bot open PRs automatically or push the data somewhere other than this repository.