Add workflow permission back and try refining job_workflow_ref
#2944
check-pull-request-labels.yaml
on: pull_request
Check pull request labels
4s