fix(release): separate publication time from the release date (#36761)

`published_at` was an alias for `created_at`, so a release created from
an existing tag reported that tag's commit date as its publication time,
and drafts reported one despite never having been published. It is now
stored separately, set when a release is published and null for drafts.

`created_at` in turn means the date of the commit the release points at,
matching what GitHub documents it to be, and the latest release is
selected by it again. Publishing a release for an old commit no longer
takes over the latest badge, and a tag created in the web UI is dated
the same way as one pushed from the CLI.

Fixes https://github.com/go-gitea/gitea/issues/11206
Fixes https://github.com/go-gitea/gitea/issues/38714
Fixes https://github.com/go-gitea/gitea/issues/31789

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

services/repository/push.go

@@ -368,47 +368,45 @@ func pushUpdateAddTags(ctx context.Context, repo *repo_model.Repository, gitRepo
 			return fmt.Errorf("Commit: %w", err)
 		}
 
-		sig := tag.Tagger
-		if sig == nil {
-			sig = commit.Author
-		}
-		if sig == nil {
-			sig = commit.Committer
-		}
-
-		createdAt := time.Unix(1, 0)
-		if sig != nil {
-			createdAt = sig.When
+		createdUnix := timeutil.TimeStamp(commit.Committer.When.Unix()) // tagged whenever, but dated by its commit
+		publishedUnix := createdUnix
+		if tag.Tagger != nil {
+			publishedUnix = timeutil.TimeStamp(tag.Tagger.When.Unix())
 		}
 
 		rel, has := relMap[lowerTag]
 		title, note := git.SplitCommitTitleBody(tag.MessageUTF8(), 255)
 		if !has {
 			rel = &repo_model.Release{
-				RepoID:       repo.ID,
-				Title:        title,
-				TagName:      tags[i],
-				LowerTagName: lowerTag,
-				Target:       "",
-				Sha1:         commit.ID.String(),
-				NumCommits:   -1, // the commits count will be updated when the UI needs it
-				Note:         note,
-				IsDraft:      false,
-				IsPrerelease: false,
-				IsTag:        true,
-				PublisherID:  pusher.ID,
-				CreatedUnix:  timeutil.TimeStamp(createdAt.Unix()),
+				RepoID:        repo.ID,
+				Title:         title,
+				TagName:       tags[i],
+				LowerTagName:  lowerTag,
+				Target:        "",
+				Sha1:          commit.ID.String(),
+				NumCommits:    -1, // the commits count will be updated when the UI needs it
+				Note:          note,
+				IsDraft:       false,
+				IsPrerelease:  false,
+				IsTag:         true,
+				PublisherID:   pusher.ID,
+				CreatedUnix:   createdUnix,
+				PublishedUnix: publishedUnix,
 			}
 
 			newReleases = append(newReleases, rel)
 		} else {
 			rel.Sha1 = commit.ID.String()
-			rel.CreatedUnix = timeutil.TimeStamp(createdAt.Unix())
+			rel.CreatedUnix = createdUnix
 			if rel.IsTag {
 				rel.Title = title
 				rel.Note = note
+				rel.PublishedUnix = publishedUnix
 			} else {
 				rel.IsDraft = false
+				if rel.PublishedUnix.IsZero() {
+					rel.PublishedUnix = timeutil.TimeStampNow()
+				}
 			}
 			rel.PublisherID = pusher.ID
 			if err = repo_model.UpdateRelease(ctx, rel); err != nil {