scribe-security/Labels Action

Wraps `docker` and (if present) `docker buildx` so that any `docker build …` or `docker buildx build …` you run in the job automatically gets **all** `GITHUB_*` env vars injected as `--label`.