I’d like to know what rules you use to prevent Tahoe updates while allowing Sequoia updates. It would be quite useful to me, and I guess, to others here who use Little Snitch.

Just enable the Sequoia developer/beta channel. You won’t see other updates then.