Implement tar

This implements TarFilter using archive/tar, getting rid of the last place we shell out to tar.