Your organization has enabled secret scanning push protection across all repositories. A developer on the payments team is legitimately committing a test credential that is triggering push protection and blocking their push. Your security team wants developers to be able to proceed with a documented exception in urgent cases, but they also want every bypass to be reviewed rather than allowing developers to self-approve. Which GitHub capability should you configure to meet this requirement?