Fix detection of the ci/no-release label in a push event

The release-main workflow is triggered by "push" event which
does not carry `github.event.pull_request.labels`.
Here we switch to GitHub CLI to lookup the PR from commit and
test for the "ci/no-release" label.
Note `gh pr list --search=COMMIT` may give several matches hence
the extra check with `grep "${GITHUB_SHA}"`.

Follow-up to #7915

Author: pavoljuhas

.github/workflows/release-main.yml

@@ -35,7 +35,9 @@ jobs:
           envsubst < dev_tools/packaging/pypirc_template > $HOME/.pypirc
       - name: Build and publish
         run: |
-          if ${{ contains(github.event.pull_request.labels.*.name, 'ci/no-release') }}; then
+          if gh pr list --state=merged --search="${GITHUB_SHA}" --label=ci/no-release \
+            --json=mergeCommit --jq=".[].mergeCommit.oid" | grep -q "${GITHUB_SHA}";
+          then
             echo "The PR has ci/no-release label - skipping the release"
             echo "### Skipped release due to ci/no-release label"  >> ${GITHUB_STEP_SUMMARY}
             exit 0