Hello Tanner,
In general, the best practice is to only have things in Staging that is also ready to go to Production. Of course, that doesn't always work and sometimes a release needs to happen when there is something in the staging branch that isn't ready for production. I recommend two routes. One, if it is a bug that needes to be patched Immediately doing a patch release i.e. doing a branch off of production and fixing the bug then doing a merge request straight to Production. Two, getting your other projects in a security sound state and put them behind a feature flag.
If either of these is not possible because of a deadline or something, just temporarily commenting/deleting things in the staging branch and pushing to production is also a fine solution.
Hope this helps,
-Trey