github: workflows: Add a Do Not Merge workflow

This allows us to fail CI if a DNM label is set. It's also preparation for
a manifest workflow which can set the label automatically when the manifest
points at a pull request rather than an actual commit in a module.

Signed-off-by: Johan Hedberg <[email protected]>

Author: jhedberg

.github/workflows/do_not_merge.yml

@@ -0,0 +1,17 @@
+name: Do Not Merge
+
+on:
+  pull_request:
+    types: [synchronize, opened, reopened, labeled, unlabeled]
+
+jobs:
+  do-not-merge:
+    if: ${{ contains(github.event.*.labels.*.name, 'DNM') }}
+    name: Prevent Merging
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Check for label
+        run: |
+          echo "Pull request is labeled as 'DNM'."
+          echo "This workflow fails so that the pull request cannot be merged."
+          exit 1