[8.13](backport #2031) Add permissions for Azure CIS 9.1 rule

[mergify]

Summary of your changes

Add Microsoft.Web/sites/config/Read and Microsoft.Web/sites/config/list/Action permissions. The permissions needed were indicated by the error message in cloudbeat logs:

ESPONSE 403: 403 Forbidden
ERROR CODE: AuthorizationFailed
--------------------------------------------------------------------------------
{
  "error": {
    "code": "AuthorizationFailed",
    "message": "The client '[REDACTED]' with object id '[REDACTED]' does not have authorization to perform action 'Microsoft.Web/sites/config/list/action' over scope '/subscriptions/[REDACTED]/resourceGroups/azurecloudbeatcitests/providers/Microsoft.Web/sites/test-app-service-pass/config/authsettings' or the scope is invalid. If access was recently granted, please refresh your credentials."
  }
}
--------------------------------------------------------------------------------

Related to #1758 (comment)

---

This is an automatic backport of pull request #2031 done by [Mergify](https://mergify.com).