Protect semver tags by default for new projects

Problem to solve

Like the default branch where force pushing is not best practice, nor is overwriting tags for releases. However, protected tags is not configured by default meaning that this needs to be configured for all new projects. This means that is a tag like v0.0.1 is pushed, it can be overwritten with a different tag - this isn't ideal.

GitLab should have great defaults that are in line with best practice.

Proposal

New projects should have protect tags:

• v* can only be created by Maintainers