Arbitrary file read via positional option bypass

Argument injection in GitPython 3.1.58 and earlier allows remote authenticated users to read host files through TagReference.create(). The method checks only keyword options, then passes the positional reference to git tag, so --file= becomes a file-reading option. Exploitation requires an embedding application to pass an authenticated user's reference value; disclosure is limited to files readable by that process.