Add direct-push alerting and sensitive-change gate callers (#88)

Author: jeremy

.github/workflows/direct-push-alert.yml

@@ -0,0 +1,16 @@
+name: Direct Push Alert
+
+on:
+  push:
+    branches: [master]
+
+permissions:
+  contents: read
+  issues: write
+
+jobs:
+  alert:
+    uses: basecamp/.github/.github/workflows/direct-push-alert.yml@a667bfaac8b33b9c8a6c61019664463a98055995
+    permissions:
+      contents: read
+      issues: write

.github/workflows/sensitive-change-gate.yml

@@ -0,0 +1,19 @@
+name: Sensitive Change Gate
+
+on:
+  pull_request_target:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  gate:
+    uses: basecamp/.github/.github/workflows/sensitive-change-gate.yml@a667bfaac8b33b9c8a6c61019664463a98055995
+    with:
+      extra-patterns: |
+        scripts/publish-aur.sh
+    permissions:
+      contents: read
+      pull-requests: write