set job permissions

.github/workflows/tag.yml

@@ -18,6 +18,7 @@ jobs:
         # Give the default GITHUB_TOKEN write permission to commit and push the
         # added or changed files to the repository.
         contents: write
+        actions: write
     steps:
       - uses: actions/checkout@v4
       - name: Setup Python