Respect tag protection rules when deleting tags

When deleting container tags, the delete endpoint should not delete tags
that match a tag protection rule. If all tag names passed for deletion
are protected, the endpoint should return an error.

Changelog: added