An organization has a runner group named production and runners labeled self-hosted, linux, and deploy. A deployment job must use an allowed runner in that group that has all three labels. Which selection is correct?

1. Use runs-on with group: production and labels: [self-hosted, linux, deploy].
2. Specify only labels: [linux] and expect the newest runner in the production group to be chosen.
3. Use only runs-on: ubuntu-latest and set the job environment to production.
4. Use runs-on: [production, self-hosted, linux, deploy] and assume production is interpreted as a group.