fix(build): release tagging

Turns out we were creating GitHub releases for `master` branch and then
force updating them to tag. This changes the process so we first push
the git tag and then create a GitHub release based off of the current
checked out commit.

(cherry picked from commit c5b48f9)

tools/bin/commands/release

@@ -148,16 +148,16 @@ release::run() {
         prerelease=true
     fi
 
+    # Push everything (if configured)
+    git_push "$topdir" "$release_version" "$moving_tag"
+
     # Release the binaries
     publish_artifacts "${topdir}" "$release_version" $prerelease
 
     # Create release description based on commit between releases
     # if check_for_command gren; then
     #    gren release --data-source=commits --tags=$release_version --override
     # fi
-
-    # Push everything (if configured)
-    git_push "$topdir" "$release_version" "$moving_tag"
 }
 
 create_moving_tag_release() {
@@ -298,6 +298,7 @@ publish_artifacts() {
     local data="{\
         \"tag_name\": \"${tag}\", \
         \"name\": \"${tag}\", \
+        \"target_commitish\": \"$(git rev-parse HEAD)\", \
         \"prerelease\": ${prerelease} \
     }"