fix(api): fix dependency repo perms in Create/RemoveIssueDependency
fix(api): draft releases could be read before being published
fix: misconfigured security checks on tag delete web form
fix: incorrect logic in "Update PR" did not enforce head branch protection rules correctly
fix: issue owner can delete another user's comment's edit history on same issue
fix: tag protection rules can be bypassed during tag delete operation
