I got a release process that looks as follows:
Add git tag, this triggers the release pipeline.

Logically, the releases should all be directly on the master-branch. However, my master branch is protected by policies.

Until now, I remove the policies when required and create a new git tag on the master branch; which i can then push to master. Afterwards, I re-add the policies to have a protected master branch.

How should the workflow look like or how can i allow anyone to directly push to master IF the commit message e.g. indicates a new release?