v4: implement meta/tags endpoint

As discussed online, we choose tags over categories if specified.

I think the whitelist check will be done in the "publish" process and is not needed here.