Google's new GitHub app provides automated enforcement of best security practices