Branch protection rules, yo!

Github has ... shitty automation around policies to enforce for an org. The rules are wonderfully powerful and while well documented for each option, don't give a good view on how to combine them for a nice safe way to work on code.