cd: add explicit perms for RP, disable cd on main, add ESRP owners (#1258) [skip ci]

* cd: update ESRP release task owners

* cd: only run automatically on tagged builds

* cd: add explicit permissions

Author: MIchaelMainer

.azure-pipelines/ci-build.yml

@@ -9,9 +9,6 @@ trigger:
   tags:
     include:
       - "v*"
-  branches:
-    include:
-      - main
 
 parameters:
   - name: previewBranch
@@ -232,7 +229,7 @@ extends:
                         contentsource: "Folder"
                         folderlocation: "$(Pipeline.Workspace)"
                         waitforreleasecompletion: true
-                        owners: vibiret@microsoft.com
+                        owners: mmainer@microsoft.com,gavinbarron@microsoft.com
                         approvers: mmainer@microsoft.com
                         serviceendpointurl: "https://api.esrp.microsoft.com"
                         mainpublisher: "ESRPRELPACMAN"

.github/workflows/release-please-gha.yml

@@ -9,7 +9,9 @@
 # variables and secrets, and then runs the release-please-action to manage versioning and changelogs.
 
 name: Release Please
-
+permissions:
+  contents: read
+  pull-requests: write
 on:
   push:
     branches: