Pass the whole response instead of only the json content

The \Symfony\Component\HttpFoundation\Response instance is already passed to the alter hook. \Drupal\Core\Cache\CacheableResponse is a subclass of this, so you should be able to alter the tags and contexts if applicable.