The Pulumi github provider allows exactly this, and lots of organizations manage GitHub this way:

https://www.pulumi.com/registry/packages/github/