Add test for config publishing review refresh behavior.
Add tests for the config publishing API.

Also simplify api sorting for the config. Only sort by the sort_order
column, rather than also falling back to created_at (since sort_order
should always be present, the fallback was just there for the
earlier transition).