cmc tags: glob on jobs, peeled commit shas, mutually exclusive with schedule. Also fixes tag-only pushes never marking mirrors dirty.