Adds a minimal Python module + .gitignore + a ci.yaml caller (ci-python-app)
so the repo emits ci / ci like a real repo, and switches the required-review
caller to the throwaway review-test-approvers team so the live luby /
internal-dev teams are not involved during validation.
Test caller that invokes the multi-team approval gate against the
reusable workflow's PR branch, so the gate can be validated before
.github PR #64 merges. all-of-teams = luby,internal-dev.
