main should be a protected branch

[enceladus]

especially when #1 is done

shouldn't necessarily require review (this is a types repo after all), but maybe only able to merge from PR