graphql-request-profiler should restrict our main branch. We want main to only accept commits from

1. Merged PRs (contributions)
2. Github action bot (updates package.json version)

The existing problem was that adding branch protections to main prevented the Github Actions bot from committing version updates to package.json. Github recently introduced a new feature called rulesets that promise to allow more granular configuration for branch protections. Investigate this ruleset feature to see if we can add the Github Actions bot to a special group that is allowed to push commits to main, but prevent everyone else from pushing commits to main.