Obtain OpenSSF Best Practices badge

@astro, would you be OK with me filling out the questionnaire to get an [Open-Source Security Best Practices](https://www.bestpractices.dev/en) badge for this project (and likewise for rust-osm-pbf-iter), and afterwards get an [Open-Source Security Scorecard](https://scorecard.dev/)? I believe the main change would be requiring code reviews, plus a few GitHub settings such as protecting the master branch from accidental deletion. Otherwise, the project seems in good shape. I don’t mind handling the (minor) bureaucracy for filling out the forms, but first I wanted to ask what you think.

Start by reviewing the OpenSSF Best Practices questionnaire and the Open-Source Security Scorecard requirements, then inspect the project's GitHub settings, including protection against accidental deletion of the master branch. Done means the maintainers have agreed on the required changes, the questionnaire is completed, and the requested badge and Scorecard are obtained.

Written by the indexing model from the issue text.