feat(ci): add automatic PR labeling by package/app

[ruudandriessen]

Summary

• Adds actions/labeler@v5 workflow that automatically labels PRs based on changed file paths
• Configures labels for all packages (pkg:apollo-core, pkg:apollo-react, pkg:apollo-wind, pkg:ap-chat), apps (app:apollo-vertex, app:storybook, app:landing, app:react-playground), and CI (.github/**)
• Uses sync-labels: true so labels are removed when files are no longer part of the changeset

Test plan

• Open a PR touching a single package and verify the correct label is applied
• Open a PR touching multiple packages/apps and verify all relevant labels appear
• Force-push to remove a file and verify the stale label is removed

[github-actions]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (PT)
apollo-canvas	🟢 Ready	Preview, Logs	Apr 10, 2026, 03:56:24 AM
apollo-landing	🟢 Ready	Preview, Logs	Apr 10, 2026, 03:56:17 AM
apollo-ui-react	🟢 Ready	Preview, Logs	Apr 10, 2026, 03:56:27 AM
apollo-vertex	🟢 Ready	Preview, Logs	Apr 10, 2026, 03:57:35 AM
apollo-wind	🟢 Ready	Preview, Logs	Apr 10, 2026, 03:56:36 AM

[github-actions]

Dependency License Review

• ✅ 1948 package(s) scanned
• ✅ No license issues found
• ⚠️ 4 package(s) excluded (see details below)

License distribution

License	Packages
MIT	1707
ISC	89
Apache-2.0	61
BSD-3-Clause	28
BSD-2-Clause	23
BlueOak-1.0.0	8
MPL-2.0	5
MIT OR Apache-2.0	3
MIT-0	3
CC0-1.0	3
LGPL-3.0-or-later	2
Unknown	2
(MIT OR Apache-2.0)	2
Unlicense	2
Python-2.0	1
CC-BY-4.0	1
(MPL-2.0 OR Apache-2.0)	1
Artistic-2.0	1
(WTFPL OR MIT)	1
(BSD-2-Clause OR MIT OR Apache-2.0)	1
CC-BY-3.0	1
0BSD	1
(MIT OR CC0-1.0)	1
MIT AND ISC	1

Excluded packages

Package	Version	License	Reason
@img/sharp-libvips-linux-x64	1.2.4	LGPL-3.0-or-later	LGPL pre-built binary, not linked
@img/sharp-libvips-linuxmusl-x64	1.2.4	LGPL-3.0-or-later	LGPL pre-built binary, not linked
@uipath/proteus-client	0.1.10	Unknown	UiPath internal package, Proprietary license
khroma	2.1.0	Unknown	MIT per GitHub repo, missing license field in package.json