Michael van Tellingen As you noticed, Jenkins doesn't currently support manually editing the configuration of calculated child items. Assuming that doesn't change, the settings for repos within an org would need to be configured at the org level or above - some kind of policy/template/formula or manual list as you mentioned.
Could you comment a bit more on what you might want this to look like? Maybe a default child permission and then a matrix of of specific children to permissions?