Protecting the `main` branch with a GitHub Ruleset

gistfile1.txt

1. **Ruleset name**: `protect-main`
2. **Enforcement status**: Active
3. **Target branches**: Add target → `main`

**Rules to enable:**

- ✅ **Restrict deletions** — prevents anyone deleting the branch
- ✅ **Require a pull request before merging** — no direct pushes to main
  - Required approvals: `1` (or `0` if solo, just to enforce the PR flow)
- ✅ **Require status checks to pass** — add `test` (from `ci.yml`) and `ruff` (from `lint.yml`)
  - ✅ Require branches to be up to date before merging
- ✅ **Block force pushes**

> **Note:** If you are the sole contributor, set required approvals to `0` — the main value is that CI must be green before anything lands on main.