🐛 fix: authorize each label using its latest event

[SigureMo]

When multiple bypass labels match, reversing the shared event array for each label makes the second lookup use its oldest event. A label re-added by someone outside the CI team can therefore be authorized using an earlier CI member's event; the inverse can also reject a valid bypass.

Reverse the filtered event array once so every label is checked against its latest actor, and rebuild dist/index.js.

Validation:

• vp test: all 31 existing tests passed.
• vp check: formatting, lint, and type checks passed.
• vp pack: bundled JavaScript rebuilt successfully.
• Executed the rebuilt action against a local mock GitHub API: all four label-order and actor scenarios returned the expected can-skip value.

^{This PR is co-authored with @codex (gpt-6 astra xhigh)}

[chatgpt-codex-connector]

To use Codex here, create an environment for this repo.