How can I disable public access to the always-up-to-date branch url?

Unfortunately Password protection is Pro only feature. You can try using middleware and deploy your own auth based restriction