protect `main` branch

[scarf005]

protecting main branch will make force pushes harder and commit history more secure.

reference: https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-pull-request-reviews-before-merging