[CI] Update egress policy in CI workflow and adjust permissions in release drafter

Signed-off-by: Moshe Vayner <moshe@vayner.me>

Author: moshevayner

.github/workflows/ci.yml

@@ -29,6 +29,10 @@ jobs:
           allowed-endpoints: >
             api.github.com:443
             github.com:443
+            *.microsoft.com:443
+            44.230.93.154:443
+            52.89.44.252:443
+            cdn.fwupd.org:443
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           ref: ${{ github.event.pull_request.head.sha }}

.github/workflows/release-drafter.yml

@@ -12,6 +12,7 @@ permissions:
 jobs:
   update_release_draft:
     permissions:
+      contents: write
       pull-requests: write
     runs-on: ubuntu-latest
     steps: