Add "action" tag to /internal/allowed API

This allows us to re-use any other analytics that rely on the "action"
tag having a value set.