Persist the tags that applied to a node when it was bound

The tags are a snapshot of what matched when policy was bound, which might
be different from what would apply now
Include the tags for a node in its detail output
Catch rule evaluation errors during /svc/checkin

These get logged both to the node's log and to the global Razor log
Annotate rule evaluation errors with the rule that caused the problem