support bypass_pull_request_allowances

[raboof]

https://docs.github.com/en/rest/branches/branch-protection?apiVersion=2026-03-10#update-pull-request-review-protection

This would require updating to apiVersion=2026-03-10 (we are currently on 2022)

Encountered in apache/infrastructure-actions#642

[dave2wave]

Actually - the first step is actually to add the settings in asfyaml

[dave2wave]

The second step is to add logic to branch_protection.py

[Humbedooh]

Would this be better solved by using rulesets now that we support them? both the raw and convenience syntax offers bypass rules for teams and individuals there.

[Humbedooh]

https://github.com/apache/infrastructure-asfyaml#rulesets