BF: Tags not fully recursively substituted

Note: recursive check ignored for "matches", as tags would be escaped,
and hence shouldn't match "<%s>" as "<ip>" would become "\<ip\>". This
therefore maintains advantage of delayed call for {ip,jail,}matches.

Fixes gh-713
DOC: ChangeLog update for recursive tag bug fix

Also minor typo fixes in comments
ENH: explicitly define tags which should be escaped
Merge branch 'recursive-tag-fix' of https://github.com/kwirk/fail2ban

* 'recursive-tag-fix' of https://github.com/kwirk/fail2ban:
  ENH: explicitly define tags which should be escaped
  DOC: ChangeLog update for recursive tag bug fix
  BF: Tags not fully recursively substituted

Conflicts:
	ChangeLog -- kept all as is