Add CODEOWNERS and the DCO app config

.github/CODEOWNERS

@@ -0,0 +1,11 @@
+# Every path needs a review from the maintainer before it can merge.
+#
+# Branch protection on the default branch requires one approving review
+# *and* a code owner's review (set by infra's open-repo-access.sh). Without
+# this file the code-owner rule is vacuous, and any collaborator with Write
+# access could approve another contributor's PR on the maintainer's behalf.
+# With it, "one approval" means the maintainer's.
+#
+# Maintainers are listed in kaappi/community's MAINTAINERS.md; keep this
+# file in step with it.
+*   @baijum

.github/dco.yml

@@ -0,0 +1,12 @@
+# Config for the DCO2 GitHub App (https://github.com/cncf/dco2).
+# Backwards compatible with the original dcoapp/app format.
+
+# Allow a contributor to retroactively sign off commits that failed the
+# check, without rewriting history (adds a remediation commit instead).
+allowRemediationCommits:
+  individual: true
+  thirdParty: false
+
+# Show the "Set DCO to pass" override button to maintainers on the check
+# details page, for edge cases (e.g. a bot-authored commit).
+allowOverrideAction: true