Not that it would be perfect, but if I could set the bar to "only licensed software engineers" can open PRs, it at least sets the bar that only accounts controlled by people who know what they're doing can open a PR to my repo, as opposed to letting anyone in the world who knows how to prompt open a PR.
(That being said, I personally haven't encountered AI SPAM on my github repos. Maybe my projects just aren't popular enough?)