ci: need the release tag sha, not branch head

Author: pfeerick

.github/workflows/release-drafter.yml

@@ -250,13 +250,14 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Download all release artifacts
+- name: Download all release artifacts
         run: |
           TAG="${{ needs.check-tag.outputs.tag_name }}"
 
-          # Get the commit SHA for this tag from GitHub API or current HEAD
-          COMMIT_SHA="${{ github.event.workflow_run.head_sha || github.sha }}"
-          echo "Looking for artifacts from commit: $COMMIT_SHA"
+          # Get the commit SHA for this tag from GitHub API
+          COMMIT_SHA=$(gh api repos/${{ github.repository }}/git/ref/tags/${TAG#v} --jq '.object.sha' 2>/dev/null || \
+                       gh api repos/${{ github.repository }}/git/ref/tags/$TAG --jq '.object.sha')
+          echo "Tag $TAG points to commit: $COMMIT_SHA"
 
           # Find all successful workflow runs for this commit
           WORKFLOW_RUNS=$(gh run list --commit $COMMIT_SHA --json databaseId,status,conclusion --jq '.[] | select(.conclusion=="success") | .databaseId')