Adding admin approval for certificate changes. (#8859)

Author: PawelWMS

.github/CODEOWNERS

@@ -93,3 +93,6 @@
 /toolkit/scripts/toolchain/container/* @microsoft/cbl-mariner-admins
 /toolkit/scripts/toolchain/cgmanifest.json @microsoft/cbl-mariner-admins
 /toolkit/scripts/toolchain/create_toolchain_in_container.sh @microsoft/cbl-mariner-admins
+
+# Modifications to the trusted CA certificates require admin approval.
+/SPECS/*ca-certificates*/*