The tool isn't (yet) intended to maintain PR labels, and the workflow doesn't have permissions to update PRs.
This replaces an internal tool that we have been running on a private Jenkins server.