This is a practical "Gitlab" version of what I have raised before in https://dabase.com/blog/2022/path-to-...
00:00 CICD should facilitate continuous delivery to production
00:26 Problem: Rubber stamping
00:50 Proposed solution: Two git repositories
01:00 Demo
03:16 Promoting to production
04:14 Approval via Merge request to protected branch
Yes this could have just been a "branch" on the same repo, but we split the repo in this case for a separate runner / account, i.e. better isolation.
https://martinfowler.com/articles/dev... for more theory.