reposurgeon: Use `hg log` to get mercurial tags.

This allows requesting the data in a defined format which is easier to parse and safe if the tag name contains spaces.

/Close #100 (closed).