Fix: [AEA-0000] - review permissions for tag release (#1013)

## Summary

- Routine Change
### Details

- review permissions for tag release

Author: anthony-nhs

.github/workflows/ci.yml

@@ -33,6 +33,9 @@ jobs:
   tag_release:
     needs: [quality_checks, get_commit_id, get_config_values]
     uses: NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@update_jira
+    permissions:
+      id-token: 'write'
+      contents: 'write'
     with:
       dry_run: true
       pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}

.github/workflows/pull_request.yml

@@ -83,6 +83,9 @@ jobs:
     if: github.event_name != 'merge_group'
     needs: [get_config_values]
     uses: NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@update_jira
+    permissions:
+      id-token: 'write'
+      contents: 'write'
     with:
       dry_run: true
       pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}