Branch protection on main not adhering to best practices

:wave: Hey there! It's [Changebot](https://github.com/mapbox/changebot), and I help repositories follow our [engineering](https://github.com/mapbox/engineering) best practices. My magic wand found some things I wanted to highlight for your review:

Item | Current status | Best practice guidelines
--- | --- | ---
main branch protection: Restrict who can push to this branch | Unchecked | Checked

Can you take a look at these best practices and make any adjustments if needed?

Please tag `@mapbox/security-and-compliance` on this issue if you have any questions

Open the repository's GitHub branch protection settings for main and compare the current configuration with the linked Mapbox engineering best-practice guidelines. Done means confirming that restricting who can push to main is enabled, or documenting the required adjustment; contact @mapbox/security-and-compliance if the policy is unclear.

Written by the indexing model from the issue text.