MR merge command bypasses required approvals

Summary

The MR merge command /merge will bypass required approvals. According to @DouweM, this is a Discussion ~bug that also exists in the API

Steps to reproduce

1. Go to a MR that requires approvals before merging
2. Type /merge in the comment and click submit

What is the current bug behavior?

MR is merged

What is the expected correct behavior?

MR should not be merged. There should be a message that alerts the user that approval is required