Tag our instance ID for better visibility + policy rules

This allows us to:

* more easily spot the instance IDs in the EC2 management console
* provide more restrictive IAM rules for e.g. "ec2:DeregisterImage"