feat: tag runners with github labels (#5185)

## Description

Adds EC2 tags for the GitHub runner labels registered through the JIT
runner flow.

Now that dynamic labels are supported, runners created from the same
multi-runner entry can register with different label sets. Before this
change, AWS-side inspection only had the instance/runner identity, so
checking the exact labels required going to GitHub.

The labels are taken from `runnerConfig.data.runner.labels`, so the EC2
tags reflect the labels GitHub registered for that runner. The instance
create-tags policy was also updated to allow the new label tag keys.

## Test Plan

Deploy the lambda, run workflow and check the new labels

## Related Issues

None

Author: edersonbrilhante