We'd like the ability to prevent data loss from every occurring in our repositories, while still supporting administrative activities such as explicitly deleting a tag that should not have been made.

Ideally, it would be possible in Stash to forbid destructive git operations entirely – forced pushes, branch deletions, tag deletions, etc – while still offering an explicit interface for deleting/renaming branches/tags/etc by administratively approved users.