docs: document protected branches and tags

We need to prevent accidental deletion of release tags and maint
branches.

We need to ensure that shared CI runners are enabled on all repos.
Reviewed-by: NAndrea Bolognani <abologna@redhat.com>
Signed-off-by: NDaniel P. Berrangé <berrange@redhat.com>

docs/newreposetup.rst

@@ -63,7 +63,7 @@ required under the **Settings** page:
 
   * **Protected branches**
 
-    * *Branch*: ``master``
+    * *Branch*: ``master`` and ``v*-maint``
 
     * *Allowed to merge*: Developers + Maintainers
 
@@ -71,6 +71,18 @@ required under the **Settings** page:
 
     * *Require approval from code owners*: disabled
 
+  * **Protected tags**
+
+    * *Tag*: ``v*`` and any project specific tag formats like ``LIBVIRT_*`` or ``CVE*``
+
+    * *Allowed to create*: Developers + Maintainers
+
+* **CI/CD**
+
+  * **Runners**
+
+    * *Shared runners*: Enable shared runners
+
 GitHub configuration
 ====================