fix(ci-cd): don't run labeler on PRs from forks

instead use a cron schedule to label PRs from forks

Author: rubenhoenle

.github/workflows/labeler.yaml

@@ -3,13 +3,18 @@ on:
   pull_request:
     types: [opened, synchronize]
   workflow_dispatch:
+  schedule:
+    # run every full hour (to still label PRs from forks)
+    - cron: '0 * * * *'
 
 jobs:
   labeler:
     permissions:
       contents: read
       pull-requests: write
       issues: write
+    # don't run on PRs from forks (token has no write permissions)
+    if: ${{ github.event.pull_request.head.repo.full_name == github.repository }}
     name: "Labeler"
     runs-on: ubuntu-latest
     steps: