Bump peter-evans/create-pull-request from 4 to 5

[dmikusa]

Review release notes to see what has changed with this major bump. Evaluate if it is OK to bump for buildpacks.

See paketo-buildpacks/java-azure#852

[dmikusa]

and if possible also bump Bump mheap/github-action-required-labels from 3 to 4

[dmikusa]

https://github.com/mheap/github-action-required-labels/releases/tag/v4.0.0 -> Looks OK to me. Nothing jumps out as breaking.

https://github.com/peter-evans/create-pull-request/releases/tag/v5.0.0 -> Looks ok, but I'm not certain exact what the two documented breaking changes will mean.

• The action will no longer leave the local repository checked out on the pull request branch. Instead, it will leave the repository checked out on the branch or commit that it was when the action started.
• When using add-paths, uncommitted changes will no longer be destroyed. They will be stashed and restored at the end of the action run.

I don't think either of these will impact us, but I recommend that we apply this to pipeline-builder-canary first to confirm.