Add permissions for Azure CIS 9.1 rule

[kubasobon]

Summary of your changes

Add Microsoft.Web/sites/config/Read and Microsoft.Web/sites/config/list/Action permissions. The permissions needed were indicated by the error message in cloudbeat logs:

ESPONSE 403: 403 Forbidden
ERROR CODE: AuthorizationFailed
--------------------------------------------------------------------------------
{
  "error": {
    "code": "AuthorizationFailed",
    "message": "The client '[REDACTED]' with object id '[REDACTED]' does not have authorization to perform action 'Microsoft.Web/sites/config/list/action' over scope '/subscriptions/[REDACTED]/resourceGroups/azurecloudbeatcitests/providers/Microsoft.Web/sites/test-app-service-pass/config/authsettings' or the scope is invalid. If access was recently granted, please refresh your credentials."
  }
}
--------------------------------------------------------------------------------

Related to #1758 (comment)

[github-actions]

📊 Allure Report - 💚 No failures were reported.

Result	Count
🟥 Failed	0
🟩 Passed	162
⬜ Skipped	0