Authenticated User Submissions Are Auto-Published in Strapi 5 (Even When Setting Draft Mode)
### Node Version

20.10.0

### NPM/Yarn/PNPM Version

10.2.3

### Strapi Version

5.7.0

### Operating System

MacOS

### Database

SQLite

### Javascript or Typescript

Typescript

### Reproduction URL

_No response_

### Bug Description

**Problem Description**

In Strapi 5, when an authenticated user submits a new Test Specie record via the API, the record is automatically published by default, even when explicitly setting status: "draft" in the request.

**However**:

- When creating a record from the Strapi Admin panel, the record stays in Draft mode as expected.
- When submitting via API with status: "draft", the record still gets published automatically.
- Using publishedAt: null is deprecated in Strapi 5, so that approach doesn't work.
- We've tried lifecycle hooks, service modifications, and middleware, but nothing prevents the API submission from being auto-published.

### Steps to Reproduce

**Steps Taken to Solve It**

1. Explicitly Set status: "draft" in API Request

```
export const createSpecie = async (token: string, specieData: any) => {
  if (!token) {
      throw new Error("Unauthorized: No token found.");
  }

  const requestData = {
    data: {
      title: specieData.title,
      description: specieData.description,
      habitat: specieData.habitat,
    },
    status: "draft", // Setting Draft Mode explicitly
  };

  const response = await fetch("http://localhost:1337/api/test-species", {
    method: "POST",
    headers: {
      "Content-Type": "application/json",
      Authorization: `Bearer ${token}`,
    },
    body: JSON.stringify(requestData),
  });

  const data = await response.json();
  console.log("API Response:", data);
  return data;
};
```
Forced Draft Mode in the Service Layer File: ./src/api/test-specie/services/test-specie.ts:

```
const { createCoreService } = require('@strapi/strapi').factories;

module.exports = createCoreService('api::test-specie.test-specie', ({ strapi }) => ({
  async create(data) {
    console.log("🚀 Service Hook - Data Before Create:", data);
    
    data.status = "draft"; // ✅ Force Draft Mode

    return await strapi.entityService.create("api::test-specie.test-specie", { data });
  }
}));
```

### Expected Behavior

The record should be created in "Draft" mode. **Actual Behavior**: The record is published automatically.

**Hosting**: Local Development
**Authentication**: JWT Bearer Token (via users-permissions plugin)
**Draft & Publish Enabled**?  Yes
**Admin Panel Behavior**: Works fine (keeps Draft mode)
**API Behavior**: Ignores status: "draft" and always publishes.

### Logs

```shell

```

### Code Snippets

_No response_

### Media

_No response_

### Additional information

_No response_

### Confirmation Checklist

- [x] I have checked the existing [issues](https://github.com/strapi/strapi/issues) for duplicates.
- [x] I agree to follow this project's [Code of Conduct](https://github.com/strapi/strapi/blob/develop/CODE_OF_CONDUCT.md).