fix: scope labeler trigger to opened/synchronize and fix bugfix typo

- Restrict pull-request-target.yml to only 'opened' and 'synchronize'
  events to reduce unnecessary API calls that exhaust the rate limit
- Fix 'bugpost' typo back to 'bugfix' in pr_enforce_labels.yml

.github/workflows/pull-request-target.yml

@@ -1,7 +1,8 @@
 name: "Pull Request Labeler"
 on:
-- pull_request_target
-# Do not execute arbitary code on this workflow. 
+  pull_request_target:
+    types: [opened, synchronize]
+# Do not execute arbitrary code on this workflow.
 # See warnings at https://docs.github.com/en/actions/reference/workflows-and-actions/events-that-trigger-workflows#pull_request_target
 
 jobs:
@@ -12,4 +13,6 @@ jobs:
     runs-on: ubuntu-24.04-arm
     steps:
     - id: label-the-PR
-      uses: actions/labeler@v6
+      uses: actions/labeler@v6
+      with:
+        repo-token: ${{ secrets.GITHUB_TOKEN }}