feat(sanctuary): allow fetching 1password fields by label

Add a use_field_labels option to op-cli-item to allow fields to be specified by labels as opposed to field ids. For manually created 1password secrets, this is more convenient.

Add an example of use_field_labels to the sanctuary docs and update tests to test retrieving values by label as well as id.