Declare additional fields on api contact.get spec for when permissions are used

When 'check_permissions' is flagged in api v3 fields not declared in 'getfields' are filtered out to prevent people exploiting the extensive (undocumented) ability of contact.get to return other objects.

Need to declare some more - group & tag to allow filtering by them