Adjust GitHub settings for non-admins

In a post-launch world, any code that gets merged into the `main` branch will automatically be deployed to production. We should ensure that this repo's settings help to prevent faulty code from being merged into `main` and going into production.

### Ideas:
* Require that Pull Requests have two approvals before being able to be merged.
* Disallow pushing to `main`