ci: scoping the permission in create_additional_release_tag.yaml (googleapis#3613)

Author: suztomo

.github/workflows/create_additional_release_tag.yaml

@@ -8,7 +8,10 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
-    permissions: write-all
+    permissions:
+      # Permission to create tag
+      # https://docs.github.com/en/rest/authentication/permissions-required-for-github-apps?apiVersion=2022-11-28#repository-permissions-for-contents
+      contents: write
     steps:
     - name: Checkout code
       uses: actions/checkout@v4