As shown by  bug 866912 , using tags for CIPD deps is a bit risky. It's just as easy to use instance IDs (similar to git hashes), so we should make the switch.

This change shows how to do that:
https://chromium-review.googlesource.com/c/chromium/src/+/1187003

Two parts to this:
1) update //docs/cipd.md instructions to show how to get the instance id (it's printed in the logs when you run cipd create)
2) Update all DEPS to use instance id rather than tag (will likely involve having to write a script to do the transformation)
 

As shown by   bug 866912  , using tags for CIPD deps is a bit risky. It's just as easy to use instance IDs (similar to git hashes), so we should make the switch.

This change shows how to do that:
https://chromium-review.googlesource.com/c/chromium/src/+/1187003

Tasks involved here:
1) update //docs/cipd.md instructions to show how to get the instance id (it's printed in the logs when you run cipd create)
2) Update all DEPS to use instance id rather than tag (will likely involve having to write a script to do the transformation)
3) Update the //third_party/android_deps script print out different cipd commands