feat: add parameters for branch protection rule customization

[olzemal]

What

related to https://github.com/opendefensecloud/odd-internal/issues/44

• common.mk — the static REPO_RULESET JSON is replaced with a ruleset built at runtime via jq, driven by new make variables

• make repo-settings now prints the effective ruleset settings on each run.

• README.md / docs/NEW_REPO.md — documented the new variables.

• Default behavior is identical to before. All features are opt-in.

• To actually improve the OpenSSF Score each project needs to:

  • Update dev-kit to a release of this feature
  • Add the new variables with values to the Makefile
  • Run make repo-settings again (requires Admin permissions).

Checklist

• Tests added/updated
• No breaking changes (or upgrade path documented above)
• Readable commit history (squashed and cleaned up as desired)
• AI code review considered and comments resolved

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 17e630d5-2843-4e1f-9312-f254524a132e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}