Make sure publish workflow only works for pr-pull labels

[peter-bread]

I think I may need to add an extra check very early on to make sure a pr-pull label was actually added.

Right now it will only stop on the pr-pull job, so the first two are just wasted compute.