.github: add CODEOWNERS for core-infra owner parts of the repo

Combined with branch protection, this should allow for the following: - PRs that impact these directories will require approval from at least one core-infra member. - PRs that do not impact these directories can be approved by anyone who has write access to the repo (incl. non-critical infra members) - Only core-infra members can push without going through a PR.