What git repository should a public web directory be in?

In an "integration manager workflow" scenario, should the public web directory be regarded as "maintainer private" git repository, or a canonical/blessed/upstream/main repository?

Since I would like to use git to push tested web applications coming from a small team of developers to the public server, is there a need for a read-only main repository?