Adds the automation identities to the branch-protection rule definitions so
release automation can operate on protected branches:
- all rules: push_whitelist_actions_user=true + moko-deploy in push whitelist
- dev, rc: enable force-push for the bots so dev can be reset to main via a
single `git push --force origin main:dev` (delete+recreate cannot work on a
protected branch)
- main keeps force-push disabled
moko-deploy needs org-team write access to take effect (mcp-mokogitea-api#30).
Unblocks the dev-sync + version-persist fixes (Template-Generic#53).
Claude-Session: https://claude.ai/code/session_01WbGBN9VyRK61zczYWcCQ2i