Update container build workflow (#705)

Update container build workflow to conditionally build images based on
PR label.

Author: afritzler

.github/workflows/publish-docker.yml

@@ -16,6 +16,7 @@ on:
     paths-ignore:
       - 'docs/**'
       - '**/*.md'
+    types: [labeled, unlabeled, opened, synchronize, reopened]
 
 jobs:
   buildAndPush:
@@ -26,6 +27,14 @@ jobs:
             target: ceph-bucket-provider
           - name: ceph-volume-provider
             target: ceph-volume-provider
+    permissions:
+      contents: read
+      packages: write
+    # Condition: Run on push to main, published release, OR PR with 'ok-to-image' label
+    if: |
+      github.event_name == 'push' || 
+      (github.event_name == 'pull_request' && contains(github.event.pull_request.labels.*.name, 'ok-to-image')) ||
+      (github.event_name == 'release' && github.event.action == 'published')
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4