Add tag_list attribute to permitted attrs on project policy

This allows admins to edit tags from a project.