GitHub launched push rules for rulesets to GA recently where you can allow only a certain team or group to push particular paths or files. The API has documentation now to support push rule targets for both Repository and Organisation.
It would be great to be able to support creating and managing these programatically.