Allow infra-core to push tags to sandbox

Change-Id: I63aca53f31b59665ecd5992fdeff2a89b87f61ac