Do these things...
In the protection rule for your default branch, expand the additional settings under the require PR checkbox and deselect the merge options so that the only selected item is rebase:
Create a separate linear history rule that targets ALL branches: