add a tag option to the bzk run CLI command

[jawher]

Something like:

bzk run --tag=security

The tag would then be used to pull the bazooka core images tagged with the same value, e.g. bazooka/server:security, etc.