manifest: track libtar

PS 2: use remote="cm"
PS 3: stupid whitespace

Change-Id: Ia1d490d3ec4eb99df05553806c38bd8b33d15f68