Simply:

• Add a ruleset preventing pushing to Main (i.e. Master).
• Create a workflow that fails if it's found the user you would like to avoid as the committing user in one of the commits, you can see my workflow here
• Make sure to add the user to the secrets under "IGNORE_USERS"