Atlassian has released BitBucket Server 6.9, as of December 10th, which now can block merges based on code quality insights, https://confluence.atlassian.com/bitbucketserver/bitbucket-server-6-9-release-notes-980462706.html.
See SonarQube announcement: How to block your PR merge in SonarQube with BitBucket Server