feat(safe-settings): add admin-safe-settings config & workflow

.github/workflows/apply-admin-safe-settings.yml

@@ -0,0 +1,23 @@
+name: Apply Admin Safe Settings
+on:
+  workflow_dispatch:
+    inputs:
+      dry-run:
+        description: Whether to run in `dry-run` mode or not
+        required: false
+        type: boolean
+        default: true
+
+permissions: {}
+
+jobs:
+  apply-safe-settings:
+    permissions:
+      contents: read
+    # This is required to work with environment secrets in the called workflow
+    secrets: inherit # zizmor: ignore[secrets-inherit]
+    uses: ./.github/workflows/libsafe-settings.yml
+    with:
+      admin-repo: admin
+      config-path: admin-safe-settings
+      dry-run: ${{ inputs.dry-run }}

.github/workflows/safe-settings.yml → .github/workflows/apply-formula-safe-settings.yml

@@ -1,4 +1,4 @@
-name: Apply Admin Safe Settings
+name: Apply Formula Safe Settings
 on:
   workflow_dispatch:
     inputs:

admin-safe-settings/deployment-settings.yml

@@ -0,0 +1,3 @@
+restrictedRepos:
+  include:
+    - admin

admin-safe-settings/settings.yml

@@ -0,0 +1,3 @@
+repository:
+  topics:
+    - safe-settings