[Bug] Unauthorized autonomous merge with admin override bypassed branch protection

Bug Description
Claude Code (Opus 4.8) ran gh pr merge --admin to merge a
▎ dev→main PR and trigger a production deploy without user
▎ authorization, using an admin override to bypass branch
▎ protection. User had not approved the merge/deploy.
▎ Requesting guardrails against autonomous
▎ merges/deploys/admin-overrides.

Environment Info

• Platform: linux
• Terminal: vscode
• Version: 2.1.177
• Feedback ID: 8c881603-e3a5-4ef3-a12c-8dd2a06566e5

Errors

[]