Add configuration for levels of protection

Add the ability to enable/disable protection on specific events:
either branch deleted or on non-fast-forward.  Both are on by
default to maintain legacy behavior, but if desired, it can be
disabled.

Change-Id: I5b36476852aa7df33f8b06f71298d7b0a27898d1