Branches of a repository: name, head commit sha, and protection flag. Read-only; no caller key needed.