Is there a "Pulumi-native" way to protect a stack? I can put a check in code for the current stack name, and reject changes based on that. Just wondering if there's a property I can add to Pulumi.mystack.yaml to achieve the same thing with no code?