Pkg.publish: use `--contains` instead of `--points-at` with git tag.

Apparently this option was added to git rather recently. Fix #4618.