Did you end up deciding on a solution?
prod is gated by the merge action itself
Who is the PR author? What if the human merging the PR just drops an approval prior to merge?