> And add tag to SRC_URI.
 
AFAIK this is not possible / bad practise, unless there were some recent changes to OE that I am unaware of. You can either specify "rev" directly in the SRC_URI or SRCREV, not both. So if you set rev to a git tag in SRC_URI, you cannot set a git commit hash within SRCREV, thus you lose reproducibility since you are now only referencing a floating rev. See also: https://stackoverflow.com/questions/78127309/how-to-set-srcrev-for-git-tag-in-yocto/78127354#78127354.
 
So setting the git commit hash in SRC_URI as rev or directly in SRCREV is the way to go.