Only tag the top-most layer when pushing to a registry

#2698