Policy for pull requests from GitHub

Pull requests can still be opened on GitHub.

We need to decide whether pull requests need to be disabled on GitHub (if that's possible), and act accordingly.