Enforce / allow immutable tags

By default, users with read and write access to a repository can push the same tag multiple times to that repository. There is nothing preventing 2 users with access to a repo from from pushing the same tag but with completely different functionality. Repositories should be able to be marked as immutable to prevent tag overwrite.