Periodically Whitelist actionable Repos (DOS-avoidance)

So long as we don't hit the API for spurious repo names, we can avoid
denial-of-service.