New repository settings for configuring pull request access

and insufficient for the growing bot spam problem