fix: detect both `WORKSPACE` and `REPO.bazel` in repositories

When a repository label is passed, we validate that it **is**
a repository by checking for `REPO.bazel`.

To support back to `7.0.0` we can check for both `WORKSPACE` _and_ `REPO.bazel`.