Allow to mirror-push only, when CI succeeds

Description

It would be nice to enable mirror-push only for refs which have been built successfully. E.g. which have an associated pipeline with a "success" status.

This allows to push only changes which have been tested.

Proposal

Add something like

[ ] requires succesful CI build

to the "Push to a remote repository" options.