There is nothing “industry way” about letting CI automatically deploy your production environment.

CI/CD are used for deploying to all kind of environments. For production, the triggers are different. Instead of deploy on PR merge, you would define the trigger as tag creation. Now when you make a release mauanlly on github, it will create a tag which in turn would trigger deployment.