GH-500 decision sheets

• Automating security alerts: webhooks vs REST or GraphQL API
• CodeQL code scanning: default setup vs advanced setup
• Dependabot: security updates vs version updates, and auto-triage
• Dependency review vs Dependabot alerts vs code scanning alerts: what acts when
• Org security roles: security manager vs org owner vs repo admin vs custom role
• Push protection: default bypass vs delegated bypass vs delegated alert dismissal
• Push protection bypass reasons vs alert closing reasons
• Secret scanning pattern types: partner vs generic vs custom
• Enabling security features at scale: security configuration vs branch protection vs CODEOWNERS
• Security overview: Overview vs Risk vs Coverage vs Campaigns
• Code Security vs Secret Protection vs free supply-chain features