Summary

• Trigger the updated PR pipeline (with labeling capability) to validate:
  • pre_pipeline applies label at pipeline start
  • query_pipeline applies label at pipeline end
• One-line test marker comment in ci/access_control_test.py (non-doc change so UT also runs)

Test Plan

• Pipeline triggers via /compile comment
• Labels applied at pipeline start (pre_pipeline)
• All jobs pass (SCA, Antipoison, pre-commit, UT)
• Labels applied at pipeline end (query_pipeline)