Require PRs and passing CI for commits to this repository

[MikeMcQuaid]

There's currently a bot that commits directly which means these branch protections security features cannot be enabled for this repository.

It would be ideal to have the bot open PRs automatically or push the data somewhere other than this repository.

[MikeMcQuaid]

Related issue which may provide inspiration: Homebrew/brew#17379

[MikeMcQuaid]

For example, in this case the regularly regenerated files could instead be deployed to GitHub Pages instead.