Improve documentation for Azure DevOps platforms

[ebisso]

Tell us more.

While adding self-hosted renovate to our project pipelines, I have taken notes of some gap in the docs related to user permissions. I think for the benefit of users going on the same path, it would be nice if that could be included in documentation.

Scenario
Running self-hosted renovate in Azure DevOps (dev.azure.com)
A single pipeline is used to update multiple repositories
A dedicated user (service principal) is used by the pipeline - in other words, not using System.AccessToken.

Documentation gap:

1. The following permissions are needed on the repositories:
   Contribute
   Contribute to pull requests
   Create branch
   Read

2. The following permissions are needed at project level:
   View project-level information

3. When using "config:azureWorkItemId", the user needs the following permissions on the area path for that work item:
   Edit work items in this node
   View work items in this node

4. Only if you want Renovate to be able to create a tag listed in "config:addLabels" that does not exist yet, the user needs the following permissions on the project:
   Create tag definition

[rarkins]

Source code is here. PRs welcome! https://github.com/renovatebot/renovate/blob/main/lib/modules/platform/azure/index.md?plain=1

[ebisso]

Doc updated #25071
Thank you!