Add bots to root-signing push restrictions

[haydentherapper]

Summary

Release Note

Documentation

[github-actions]

🍹 preview on sigstore-github-sync/sigstore/github-prod

Pulumi report

Previewing update (sigstore/github-prod)

View Live: https://app.pulumi.com/sigstore/sigstore-github-sync/github-prod/previews/480e2b4b-30be-4acf-a972-375cc67390da

@ Previewing update.....
pulumi:pulumi:Stack: (same)
[urn=urn:pulumi:github-prod::sigstore-github-sync::pulumi:pulumi:Stack::sigstore-github-sync-github-prod]
@ Previewing update....
~ github:index/branchProtection:BranchProtection: (update)
    [id=BPR_kwDOFotDCM4B9eNe]
    [urn=urn:pulumi:github-prod::sigstore-github-sync::github:index/branchProtection:BranchProtection::root-signing-main]
  ~ pushRestrictions: [
      + [2]: "MDQ6VXNlcjg2ODM3MzY5"
      + [3]: "U_kgDOByoNQQ"
    ]
~ github:index/branchProtection:BranchProtection: (update)
    [id=BPR_kwDOFotDCM4CDLrs]
    [urn=urn:pulumi:github-prod::sigstore-github-sync::github:index/branchProtection:BranchProtection::root-signing-test-ceremony/*]
  ~ pushRestrictions: [
      + [2]: "MDQ6VXNlcjg2ODM3MzY5"
      + [3]: "U_kgDOByoNQQ"
    ]
~ github:index/branchProtection:BranchProtection: (update)
    [id=BPR_kwDOFotDCM4CDLru]
    [urn=urn:pulumi:github-prod::sigstore-github-sync::github:index/branchProtection:BranchProtection::root-signing-ceremony/*]
  ~ pushRestrictions: [
      + [2]: "MDQ6VXNlcjg2ODM3MzY5"
      + [3]: "U_kgDOByoNQQ"
    ]
Resources:
~ 3 to update
574 unchanged