Adds a minimal Python module + .gitignore + a ci.yaml caller (ci-python-app)
so the repo emits ci / ci like a real repo, and switches the required-review
caller to the throwaway review-test-approvers team so the live luby /
internal-dev teams are not involved during validation.
