feat(ci): add no_upload_srpms label (#5758) (#5785)

* feat(ci): add no_upload_srpms label

This also fixes manual builds to support subrepos properly.

* to make sure it actually works

* manually set permissions

(cherry picked from commit bc5a6c144c)

Signed-off-by: GildedRoach <GildedRoach@users.noreply.github.com>
Co-authored-by: madomado <madonuko@outlook.com>

.github/workflows/json-build.yml

@@ -1,4 +1,6 @@
 name: JSON Build
+permissions:
+  contents: read
 on:
   workflow_dispatch:
     inputs:
@@ -67,6 +69,7 @@ jobs:
             terra${{ matrix.version }}${{ matrix.pkg.labels['subrepo'] && '-$subrepo' || '' }} anda-build/rpm/rpms/*
 
       - name: Upload source packages to subatomic
+        if: matrix.pkg.labels['no_upload_srpms'] != '1'
         run: |
           subrepo="${{ matrix.pkg.labels.subrepo }}"
           subatomic-cli upload --prune \