k8s-ci-robot merged approved PR with `needs-ok-to-test` label

<!-- Please use this template while reporting a bug and provide as much info as possible. Not doing so may result in your bug not being addressed in a timely manner. Thanks!--> **What happened**: This PR was merged after `/lgtm` and `/approve`: https://github.com/kubernetes-sigs/agent-sandbox/pull/288, even though it hasn't passed tests (still with `needs-ok-to-test` label) **What you expected to happen**: I'd expect the PR not merged until `ok-to-test` label exists and tests have passed