Add repo roles:

.github/CODEOWNERS

@@ -0,0 +1,2 @@
+/.github/settings.yml @jacobweinstock @mmlb
+/.github/CODEOWNERS @jacobweinstock @mmlb

.github/settings.yml

@@ -0,0 +1,24 @@
+# Collaborators: give specific users access to this repository.
+# See https://docs.github.com/en/rest/reference/repos#add-a-repository-collaborator for available options
+collaborators:
+  # Maintainers, should also be added to the .github/CODEOWNERS file as owners of this settings.yml file.
+  - username: jacobweinstock
+    permission: maintain
+  - username: mmlb
+    permission: maintain
+  # Approvers
+  - username: detiber
+    permission: push
+  - username: displague
+    permission: push
+  # Reviewers
+  - username: nshalman
+    permission: triage
+
+  # Note: `permission` is only valid on organization-owned repositories.
+  # The permission to grant the collaborator. Can be one of:
+  # * `pull` - can pull, but not push to or administer this repository.
+  # * `push` - can pull and push, but not administer this repository.
+  # * `admin` - can pull, push and administer this repository.
+  # * `maintain` - Recommended for project managers who need to manage the repository without access to sensitive or destructive actions.
+  # * `triage` - Recommended for contributors who need to proactively manage issues and pull requests without write access.

.gitignore

@@ -4,6 +4,7 @@
 !deploy/compose/state/webroot/workflow/.keep
 !deploy/.env
 !.gitignore
+!.github/
 
 # Local .terraform directories
 .terraform*