No plugin to install and no bot to authorise. Bitbucket already runs commands on merge; two of them keep your translations in step.
Everything below authenticates with one API key, scoped to read or write and optionally pinned to a single platform, so a build job can never reach further than the app it builds.
GET /status reports how far every locale has got. Fail the job when the language you promised is not finished, and an untranslated string cannot reach production by accident.
Add LOCOLOOP_API_KEY as a secured repository variable. That is the entire setup.
Rename a key in locoloop and a pipeline still pushing the old name updates the same key rather than resurrecting a duplicate.
The gate is an exit code. A missing translation stops the deploy the way a failing test does.
Create a workspace, mint a read/write key, paste the job in. Free while you are evaluating.