Perform tag whitelist check on data ingest too

This is because people may submit with an old client that doesn't
whitelist
It does work, but passing python objects by reference still seems like black magic to me, so I think my original plan was to make it explicit and have the calling line as `data = clean_metadata(data)`
Since it works I guess removing the return is fine