chore: ensure bootstrap template changes go through correct checks

[mrgrain]

Enforces:

• the bootstrap template version is incremented
• a security review is completed, attested by adding a specific label

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 80.91%. Comparing base (80d4d15) to head (3f195bc).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #813   +/-   ##
=======================================
  Coverage   80.91%   80.91%           
=======================================
  Files          63       63           
  Lines        8618     8619    +1     
  Branches     1035     1035           
=======================================
+ Hits         6973     6974    +1     
+ Misses       1616     1615    -1     
- Partials       29       30    +1     

Flag	Coverage Δ
suite.unit	80.91% <ø> (+<0.01%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.