Output qualified job/run for cli list-runs; accept that in get-log
Minor tweaks
Avoid ever showing deleted items unless they're asked for
Another UniqueTag helper
Support self-run CAs