feat: [QA][POLICY] Branch Protection + Mandatory Review Policy for All Repos (#918)

Refs #918
Agent: groq

.gitea/branch-protection.yml

@@ -0,0 +1,10 @@
+main:
+  allow_force_push: false
+  allow_deletions: false
+  require_pull_request: true
+  required_approvals: 1
+  dismiss_stale_reviews: true
+  require_ci_to_pass: true
+  required_status_checks:
+    - "ci/build"
+    - "ci/test"

.gitignore

@@ -2,3 +2,4 @@ node_modules/
 test-results/
 nexus/__pycache__/
 tests/__pycache__/
+.aider*