ci: isolate and harden organization label credentials#3

lzm0x219 merged 6 commits into

mainmatharts/.github:mainfrom

agent/harden-label-credentialsmatharts/.github:agent/harden-label-credentialsCopy head branch name to clipboard