The ACLs for openstack-dev/hacking were authorizing direct
tags from the hacking-release team, however hacking releases
are handled through openstack/releases automation now.
That resulted in extra tags being directly pushed recently.
To avoid this in the future, fix the ACL to prevent direct
tagging.
Change-Id: I382f77c8c6e4c4f2275a705993ad700fe0181a36