gitlab-ci: add 'cmake' tag to all jobs

This will give us more granular control over which runners accept jobs for CMake. In particular, runners that are tagged for specific resources can not have the cmake tag so that they can focus on jobs that are actually tagged for those resources.

Backport: release