Add tool to manage branch protection rules across many repositories

We currently have a branch protection rule in place that protects "release-*" branches in our repositories.

This has drawbacks:

• it will cause release scripts to fail because the newly created release branches cannot be pushed to by the script
• prs on these branches cannot use the merge queue (not possible with wildcards in the branch name)

It might be worth switching to individual protection rules for every release, but that would make them hard to change/administer.

The github api allows managing these rules: https://docs.github.com/en/rest/branches/branch-protection?apiVersion=2022-11-28

We should look into writing a simple python script that takes a list of repos and release names and updates these protection rules.

从 issue 中链接的 GitHub branch protection REST API 开始，确定如何管理多个存储库的保护规则。将脚本输入定义为存储库列表和 release 名称列表；完成的标准是可以集中更新规则，而不依赖 release-* 通配符，从而使 release 推送和合并队列正常工作。