Copy working main configuration to 2.x

Author: ppkarwasz

.asf.yaml

@@ -65,6 +65,23 @@ github:
 
   # Enforce Review-then-Commit
   protected_branches:
+    2.x:
+      # All commits must be signed
+      required_signatures: true
+      # All reviews must be addressed before merging
+      required_conversation_resolution: true
+      # Require checks to pass before merging
+      required_status_checks:
+        checks:
+          # The GitHub Actions app: 15368
+          - app_id: 15368
+            context: "build / build (ubuntu-latest)"
+          # The GitHub Advanced Security app: 57789
+          - app_id: 57789
+            context: "CodeQL"
+      # At least one positive review must be present
+      required_pull_request_reviews:
+        required_approving_review_count: 1
     main:
       # All commits must be signed
       required_signatures: true
@@ -76,7 +93,7 @@ github:
           # The GitHub Actions app: 15368
           - app_id: 15368
             context: "build / build (ubuntu-latest)"
-          # CodeQL app
+          # The GitHub Advanced Security app: 57789
           - app_id: 57789
             context: "CodeQL"
       # At least one positive review must be present