You would have to solve it through Bitbucket administration.
See this tutorial, last updated April 15, 2025
Using branch permissions, add the following branch permission pattern to "Prevent all changes":
refs/tags/**
Restrict it to an admin account so that no other users can push tags.