/latest endpoint doesn't consider semver (mutable tags support)

[awantoch]

for projects that use alpha releases, hitting /latest would cause unexpected behavior. we need to allow for beta and alpha tracks, similar to NPM -- we can do mutable tags that link to existing tags that people can update or client-side parsing of semver