Fix public-only token enforcement for user/org APIs and notifications#37118

lunny wants to merge 3 commits intogo-gitea:maingo-gitea/gitea:mainfrom

lunny:lunny/fix_public_only_list_orglunny/gitea:lunny/fix_public_only_list_orgCopy head branch name to clipboard