tag: disallow '-' as tag name