* ci: add standard labeler caller (INFRA-136)
Adds the org standard callable-labeler thin caller, missing on this repo
(present on 26/28 repos). All three permission grants are load-bearing;
omitting one causes a silent startup_failure.
* Update labeler workflow to specific commit
