Deployment protections

Protections apply to every production deploy in this workspace.

One approving review from outside the authoring team.
The deploy waits for the full test suite and the security scan.
Production deploys are refused outside 08:00–18:00 UTC on weekdays.