How do you tag / mark a commit a snapahot of all files in an OS image that's independent from each device's local state and then move them from one commit to another atomically? Basically a `git pull` on a branch but binary and atomic.

CoW is strictly local. You can make a snapshot of local state sure and even atomically change it. But that's not we want.