Add Tag ACL Permissions

[reskin89]

Feature Description

As a consul administrator, I'd like to be able to force/enforce certain tagging requirements on services, such that I can:

• Require a service register with certain tags (and validate values of them)
• Deny Certain Tags

Use Case(s)

As an administrator, this would allow me to organize the services teammates register to my consul cluster. This would allow me to tie things like environments, application identifiers, team identifiers and the like to specific services that join my consul ecosystem.

Example: I have 3 teams registering their own applications, I'd like to be able to require them to provide a team and application-id to register their service, or be met with an error much like when an agent or node prefix value is not met such as:

acl token with accessor id xyz does not have permission tag:write on resource someServiceName