Improve the commit finding approach

[behnazh-w]

Instead of looking up tags directly, we can get the releases through the GitHub API and retrieve the tag/commit:

https://api.github.com/repos/OWNER/REPO/releases

For example part of the response for https://api.github.com/repos/google/guava/releases is:

    "tag_name": "v32.1.3",
    "target_commitish": "master",
    "name": "32.1.3",
    "draft": false,
    "prerelease": false,
    "created_at": "2023-10-10T20:34:53Z",
    "published_at": "2023-10-10T22:20:41Z",

This way we can prune the unrelated tags and further filter the draft and prerelease results. This seems to be a better approach or at least a good way to improve precision.

If repository is not using GitHub releases, the API returns an empty list. In this case we can fall back to checking the tags.

Note: by finding the corresponding release tag, we can populate the release_tag attribute of the Repository object.