chore: add .github/repos.json for gh-reposync self-management

Per-repo manifest describing tlock's desired description, topics,
settings, security, and branch protection. Run from the repo root:

    gh reposync --apply

Auto-discovered via .github/repos.json — no flags needed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: retr0h

.github/repos.json

@@ -0,0 +1,38 @@
+{
+  "org": "retr0h",
+  "settings": {
+    "has_issues": true,
+    "has_wiki": false,
+    "has_projects": false,
+    "delete_branch_on_merge": true,
+    "allow_merge_commit": false,
+    "allow_squash_merge": true,
+    "allow_rebase_merge": true,
+    "allow_auto_merge": true,
+    "web_commit_signoff_required": false
+  },
+  "security": {
+    "vulnerability_alerts": true,
+    "dependabot_security_updates": true,
+    "secret_scanning": true,
+    "secret_scanning_push_protection": true
+  },
+  "branch_protection": {
+    "branch": "main",
+    "enforce_admins": true,
+    "required_status_checks": { "strict": true },
+    "required_pull_request_reviews": { "required_approving_review_count": 0 },
+    "required_conversation_resolution": true,
+    "allow_force_pushes": false,
+    "allow_deletions": false,
+    "block_creations": true,
+    "restrictions": null
+  },
+  "repos": [
+    {
+      "name": "tlock",
+      "description": "🔒 Lock your terminal. Unlock with your fingerprint.",
+      "topics": ["cli", "golang", "lock-screen", "macos", "retro", "screensaver", "terminal", "tlock", "tmux", "touch-id"]
+    }
+  ]
+}