Which of the following steps correctly demonstrates how to establish an organization-wide policy for GitHub...

“Organization administrators can configure GitHub Copilot Business policies within the organization settings, including restricting usage to certain repositories.”

This proves that the correct way is through organization settings, not repository-level files or GitHub Actions.