Merge branch 'security-fix-user-email-tag-push-leak-11-7' into 'security-11-7'
[11.7] Security fix user email tag push leak See merge request gitlab/gitlabhq!2809 (cherry picked from commit f59786036d65a881370073d55f8ab531405d3093) cbfa6282 Prefer build() rather than create() d34ea609 Fix private user email being visible in tag webhooks