Dev/create tag policy

This patch series adds commands to create tags and policies, and does some minor fiddling with the data model for policies and nodes; in particular, it makes sure the hostname and root_password for nodes gets populated when a policy is bound to a node.

Client support for the new commands will be added in another patch series