chore(workflows): align issue label and preview gating

.github/workflows/documentation.yml

@@ -1,6 +1,8 @@
 name: Documentation
 on:
   pull_request_target:
+  issue_comment:
+    types: [created]
   workflow_call:
     secrets:
       SURGE_LOGIN:
@@ -10,25 +12,31 @@ on:
       GH_PR_TOKEN:
         required: true
 jobs:
+  check-permissions:
+    uses: patternfly/.github/.github/workflows/check-team-membership.yml@main
+    secrets: inherit
+
   deploy:
     name: Build, test & deploy
     runs-on: ubuntu-latest
+    needs: check-permissions
+    if: github.event_name == 'workflow_call' || needs.check-permissions.outputs.allowed == 'true'
     env:
       SURGE_LOGIN: ${{ secrets.SURGE_LOGIN }}
       SURGE_TOKEN: ${{ secrets.SURGE_TOKEN }}
       GH_PR_TOKEN: ${{ secrets.GH_PR_TOKEN }}
-      GH_PR_NUM: ${{ github.event.number }}
+      GH_PR_NUM: ${{ needs.check-permissions.outputs.pr-number }}
     steps:
       - name: Check out project from PR branch
-        if: github.event_name == 'pull_request_target'
+        if: github.event_name == 'pull_request_target' || github.event_name == 'issue_comment'
         uses: actions/checkout@v4
         with:
           # Checkout the merge commit so that we can access the PR's changes.
           # This is nessesary because `pull_request_target` checks out the base branch (e.g. `main`) by default.
           ref: refs/pull/${{ env.GH_PR_NUM }}/head
 
       - name: Check out project
-        if: github.event_name != 'pull_request_target'
+        if: github.event_name == 'workflow_call'
         uses: actions/checkout@v4
 
       - name: Set up and build project

.github/workflows/label-pf-team-issue.yml

@@ -0,0 +1,9 @@
+name: Label PF Team issues
+on:
+  issues:
+    types:
+      - opened
+jobs:
+  label:
+    uses: patternfly/.github/.github/workflows/add-pf-team-label-workflow.yml@main
+    secrets: inherit