lock down legacy git infrastructure

As part of the Gitolite retirement procedure (TPA-RFC-36, #41180 (closed)), lock Gitolite repositories without any changes in the last two years, preventing any further change.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information