Pursue PVR and push protection on all Foundation projects

[ljharb]

Request projects to enable PVR and push protection for secrets (as well as branch protections), and whether they do it or not, document the current state in the dashboard.

### Tasks
- [ ] NativeScript
- [ ] AMP
- [ ] Architect
- [ ] Dojo
- [ ] Esprima
- [ ] Interledger.js
- [ ] Jed
- [ ] JerryScript
- [ ] libuv
- [ ] Marko
- [ ] MessageFormat
- [ ] Mocha
- [ ] Moment
- [ ] RequireJS
- [ ] Sizzle
- [ ] Webhint
- [x] Appium
- [ ] Fastify
- [ ] jQuery
- [ ] Node.js
- [x] nvm
- [ ] webpack
- [ ] Electron
- [ ] ESLint
- [ ] Express
- [ ] Globalize
- [ ] Grunt
- [ ] Intern
- [ ] jQuery UI
- [ ] Lodash
- [ ] LoopBack
- [ ] Node-RED
- [ ] QUnit
- [ ] WebdriverIO

[mhdawson]

What does PVR stand for. A quick google for PVR and GitHub did not return relevant topics.

[ljharb]

Private vulnerability reporting. It’s a native feature on github now.

[mhdawson]

@ljharb thanks.

[ruddermann]

This issue is being replaced with two new ones:

• https://github.com/openjs-foundation/security-collab-space/issues/129
• https://github.com/openjs-foundation/security-collab-space/issues/133