How about this then: we make it policy that all core-involved "stuff' -- mailing lists, issue tracker, etc. -- are to be explicitly put under the PSF CoC? I think python-dev and bugs.python.org
are things we control which do not explicitly follow the PSF CoC (I have an email to python-dev-owner@ to get get python-dev updated but I have not heard back; <nudge> :). We could also, as policy, put all projects under the python organization on GitHub -- existing and future -- under the PSF CoC by adding an appropriate CONTRIBUTING file to the repositories.