[vitormattos]

Summary

• Keep the existing OrganizationAdmin PR bypass.
• Allow the GitHub maintainers team (ID 19381727) to use PR bypass on the protected-branches ruleset.
• Keep the other branch protection rules, CI rulesets, and the Nextcloud bot condition unchanged.

Why

A repository Maintain role does not provide permission to bypass required PR reviews. This change lets the technical maintainers use the existing ruleset bypass process, while organization admins keep their current permissions.

The team membership was reviewed separately. Both organizations currently have vitormattos and YvesCesar in their maintainers team.

Validation

• Confirmed the team ID and membership using GitHub API.
• Validated the JSON configuration and compared the branch with main.
• Confirmed the only file change is five added lines in governance.config.json.
• Commit is signed and DCO-compliant.

Rollout

After review and merge, run the existing governance dry-run and inspect the full diff before using the protected ruleset-sync apply workflow. Confirm the bypass actors on representative repositories. This PR does not apply rulesets directly.

Related configuration: LibreCodeCoop/.github.