VCS: Fix weird tag creation

Creating a tag with an arbitrary user-supplied name can cause problems.
If we fetch, we can just use `FETCH_HEAD` as the ref name directly!

```
Running: git fetch origin d1dc91fd977bb4b28f0e01966fa08640a1283318
From /private/var/folders/z5/fclwwdms3r1gq4k4p3pkvvc00000gn/T/vcstest-90401/src
 * branch            d1dc91fd977bb4b28f0e01966fa08640a1283318 -> FETCH_HEAD

Running: git tag -f d1dc91fd977bb4b28f0e01966fa08640a1283318 FETCH_HEAD

Running: git reset --hard d1dc91fd977bb4b28f0e01966fa08640a1283318 --
warning: refname 'd1dc91fd977bb4b28f0e01966fa08640a1283318' is ambiguous.
Git normally never creates a ref that ends with 40 hex characters
because it will be ignored when you just specify 40-hex. These refs
may be created by mistake. For example,

  git switch -c $br $(git rev-parse ...)

where "$br" is somehow empty and a 40-hex ref is created. Please
examine these refs and maybe delete them. Turn this message off by
running "git config advice.objectNameWarning false"
```

cabal-install/src/Distribution/Client/VCS.hs

@@ -533,8 +533,7 @@ vcsGit =
               (\e -> if isPermissionError e then removePathForcibly gitModulesDir else throw e)
           else removeDirectoryRecursive gitModulesDir
       when (resetTarget /= "HEAD") $ do
-        git localDir fetchArgs -- first fetch the tag if needed
-        git localDir setTagArgs
+        git localDir ("fetch" : verboseArg ++ ["origin", resetTarget])
       git localDir resetArgs -- only then reset to the commit
       git localDir $ ["submodule", "sync", "--recursive"] ++ verboseArg
       git localDir $ ["submodule", "update", "--force", "--init", "--recursive"] ++ verboseArg
@@ -556,14 +555,16 @@ vcsGit =
             ++ verboseArg
           where
             loc = srpLocation
-        -- To checkout/reset to a particular commit, we must first fetch it
-        -- (since the base clone is shallow).
-        fetchArgs = "fetch" : verboseArg ++ ["origin", resetTarget]
-        -- And then create the Tag from the FETCH_HEAD (which we should have just fetched)
-        setTagArgs = ["tag", "-f", resetTarget, "FETCH_HEAD"]
-        -- Then resetting to that tag will work (if we don't create the tag
-        -- locally from FETCH_HEAD, it won't exist).
-        resetArgs = "reset" : verboseArg ++ ["--hard", resetTarget, "--"]
+
+        resetArgs =
+          "reset"
+            : verboseArg
+            ++ [ "--hard"
+               , if resetTarget == "HEAD"
+                  then "HEAD"
+                  else "FETCH_HEAD"
+               , "--"
+               ]
         resetTarget = fromMaybe "HEAD" (srpBranch `mplus` srpTag)
         verboseArg = ["--quiet" | verbosity < Verbosity.normal]