chore(workflows): improve git-cliff installation and tagging

- Add `--locked` flag to ensure reproducible git-cliff builds
- Set author and committer dates for consistent tag timestamps
- Fix minor formatting inconsistencies in the workflow file

.gitea/workflows/release.yml

@@ -4,7 +4,7 @@ on:
   push:
     branches:
       - main
-      - '**'
+      - "**"
 
 jobs:
   detect-version-change:
@@ -69,7 +69,7 @@ jobs:
       - name: Install git-cliff
         if: steps.restore-cliff.outputs.cache-hit != 'true'
         run: |
-          cargo install git-cliff --version "${{ steps.cliff_version.outputs.version }}" --features gitea
+          cargo install git-cliff --locked --version "${{ steps.cliff_version.outputs.version }}" --features gitea
 
       - name: Generate unreleased changelog (if file exists or on main)
         run: |
@@ -124,8 +124,8 @@ jobs:
       - name: Install git-cliff
         if: steps.restore-cliff.outputs.cache-hit != 'true'
         run: |
-          cargo install git-cliff --version "${{ steps.cliff_version.outputs.version }}" --features gitea
-      
+          cargo install git-cliff --locked --version "${{ steps.cliff_version.outputs.version }}" --features gitea
+
       - name: Generate changelog for release and tag
         id: generate-changelog
         run: |
@@ -152,7 +152,6 @@ jobs:
 
           echo "changelog_body_path=$BODY" >> $GITHUB_OUTPUT
 
-
       - name: Commit updated CHANGELOG
         run: |
           git add CHANGELOG.md
@@ -169,12 +168,14 @@ jobs:
           if git rev-parse "v$VERSION" >/dev/null 2>&1; then
             echo "Tag v$VERSION already exists, skipping tag creation."
           else
+            export GIT_AUTHOR_DATE="$(date --iso-8601=seconds)"
+            export GIT_COMMITTER_DATE="$GIT_AUTHOR_DATE"
             git tag -a "v$VERSION" -F "${{ steps.generate-changelog.outputs.changelog_body_path }}" --cleanup=verbatim
             git push origin "v$VERSION"
           fi
 
       - name: Create Gitea release
-        env: 
+        env:
           RELEASE_PUBLISH_TOKEN: ${{ secrets.RELEASE_PUBLISH_TOKEN }}
         run: |
           VERSION=${{ steps.version.outputs.value }}