Add option to remote mirrors to only push protected branches

Closes #3843

See merge request gitlab-org/gitlab-ee!3350