meta: add automation policy

PR-URL: #62871
Reviewed-By: Filip Skokan <[email protected]>
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
Reviewed-By: Yagiz Nizipli <[email protected]>
Reviewed-By: Michaël Zasso <[email protected]>
Reviewed-By: Matteo Collina <[email protected]>
Reviewed-By: Chemi Atlow <[email protected]>
Reviewed-By: James M Snell <[email protected]>
Reviewed-By: Rafael Gonzaga <[email protected]>
Reviewed-By: Joyee Cheung <[email protected]>
Reviewed-By: Tobias Nießen <[email protected]>
Reviewed-By: Ethan Arrowood <[email protected]>
Reviewed-By: Сковорода Никита Андреевич <[email protected]>

Author: legendecas

CONTRIBUTING.md

@@ -19,6 +19,7 @@ works.
 * [Code of Conduct](#code-of-conduct)
 * [Issues](#issues)
 * [Pull Requests](#pull-requests)
+* [Automation and bots](#automation-and-bots)
 * [Developer's Certificate of Origin 1.1](#developers-certificate-of-origin-11)
 
 ## [Code of Conduct](./doc/contributing/code-of-conduct.md)
@@ -47,6 +48,18 @@ dependencies, and tools contained in the `nodejs/node` repository.
 * [Reviewing Pull Requests](./doc/contributing/pull-requests.md#reviewing-pull-requests)
 * [Notes](./doc/contributing/pull-requests.md#notes)
 
+## Automation and bots
+
+An automation tool or bot that is not managed by the Node.js project
+must seek explicit authorization by opening an issue with their owner
+in [nodejs/admin](https://github.com/nodejs/admin) before interacting
+with the project.
+
+Interactions (including Issues, Comments, Pull Requests and Reviews) made
+by an automation that was not authorized by Node.js collaborators are
+subject to immediate moderation enforcement on the automation and owner
+without notice.
+
 ## Developer's Certificate of Origin 1.1
 
 ```text