krupalvora/ITGC ? reverse-engineered prompt

Build me a Frappe app for ERPNext that adds Information Technology General Controls.

I want one simple settings page called ITGC Settings where I can turn on access control and change management separately. For access, it should use a maker checker approval flow for things like roles, role profiles, doctype permissions, and user permissions, and it should also lock down the direct access master records so people can’t edit them normally. For change management, it should create an approval record for code changes and support a GitHub Actions merge gate so pull requests to protected branches like staging and prod cannot merge until the change is approved in Frappe.

Please make it safe to install with everything off by default, and have the app set up the needed roles, workflows, and permissions automatically. Include clear setup instructions in the README, and if you need current Frappe or GitHub Actions details, look up the latest docs online.