IIRC you can't do "manual approval" pre-deployment.

What I would suggest is to create branch protections in your Github repository such that pushes to the master branch must require approvals/checks to pass, and that most if not all development work is being done on a separate branch.