Use publisher in favour of the OWASP tag

[fgsch]

I'd like to drop the OWASP tag in favour of the OWASP publisher (or origin as it stands today).

Originally all OWASP rules had their tags replaced with OWASP and we didn't have any other mechanism to search for OWASP rules outside the tags.

Since then we have added the origin (soon publisher) and instead of replacing the tags, added OWASP to the existing ones. This made possible to search for e.g. OWASP_TOP_10.

I'd like to eventually remove the OWASP tag for cleaning and deduplication purposes.

[fgsch]

Let's address this one way or another before we open this.