Add support for GH actions settings

[mbarbero]

The following settings are accessible since Summer 2025 via new REST endpoints:

• Approval for running fork pull request workflows from contributors
• (Allowing workflows on fork pull requests in private repositories)

See https://docs.github.com/en/enterprise-cloud@latest/rest/actions/permissions?apiVersion=2022-11-28

It would be great to support those settings at the org and repo level, esp. https://docs.github.com/en/enterprise-cloud@latest/rest/actions/permissions?apiVersion=2022-11-28#set-fork-pr-contributor-approval-permissions-for-an-organization

[netomi]

Setting sha_pinning_required is also interesting imho.