Opening the book…
An approval on the prod environment is the difference between "the pipeline deployed at 2am" being a feature or an incident report.
Define test/staging/prod as ADO Environments. Prod carries an approval check naming real people and a business-hours window unless explicitly overridden.
Fully automated deploys are earned later — after deployment verification and rollback are themselves automated and trusted.