chore: rework labeling jobs (#1103)

<!-- markdownlint-disable MD041 -->
#### What this PR does / why we need it

this unifies the labelling jobs in one workflow and makes sure that at
least one of our identifying labels is always set

#### Which issue(s) this PR fixes
<!--
Usage: `Fixes #<issue number>`, or `Fixes (paste link of issue)`.
-->

.github/workflows/pr-labeler-size.yml → .github/workflows/pr-labeler.yaml

@@ -1,13 +1,27 @@
-name: labeler
-
-on: [pull_request]
+name: PR Labeler
+on:
+- pull_request_target
 
 permissions:
   pull-requests: write
   issues: write
-  
+
 jobs:
-  labeler:
+  branch-name-labeler:
+    permissions:
+      contents: read
+      pull-requests: write
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          sparse-checkout: |
+            .github/config/labeler.yml
+      - name: Label PR based on branch name
+        uses: actions/labeler@v5
+        with:
+          configuration-path: .github/config/labeler.yml
+  size-labeler:
     runs-on: ubuntu-latest
     name: Label the PR size
     permissions:
@@ -33,3 +47,12 @@ jobs:
             Note this PR might be rejected due to its size.
           # github_api_url: 'api.github.com'
           # files_to_ignore: ''
+  check_labels:
+    needs: [branch-name-labeler, size-labeler]
+    name: Check labels
+    runs-on: ubuntu-latest
+    steps:
+      - uses: docker://agilepathway/pull-request-label-checker:latest
+        with:
+          one_of: hore,fix,bugfix,bug,kind/bug,feature,enhancement,kind/enhancement,dependencies
+          repo_token: ${{ secrets.GITHUB_TOKEN }}