Update Gerrit permissions for global service users (built at http://cl/893733512)

Added permissions:
  Section [refs/heads/*]:
    Read:
      ALLOW: SLSA Policy Verification Service Accounts
    label-SLSA-Policy-Verified:
      ALLOW: SLSA Policy Verification Service Accounts

groups

diff --git a/groups b/groups
index c1badb5..66d2dfc 100644
--- a/groups
+++ b/groups
@@ -2,6 +2,7 @@
 #
 62778f7f1b4d2f168dc97a8840f509439d184be5	admins
 90f71e69b86d39ce0356bf9692d1fd8c972a8bd2	approvers
+bb6233ca816ebbd75fb021863f2525ba866318dc	SLSA Policy Verification Service Accounts
 d651a8840b2b5a967d0b04d4b0208969394c3010	nobody
 global:Anonymous-Users                  	Anonymous Users
 global:Project-Owners                   	Project Owners

project.config

diff --git a/project.config b/project.config
index b153154..cf83f69 100644
--- a/project.config
+++ b/project.config
@@ -34,6 +34,8 @@
 	push = group admins
 	push = +force group nobody
 	delete = group nobody
+	label-SLSA-Policy-Verified = -1..+1 group SLSA Policy Verification Service Accounts
+	Read = group SLSA Policy Verification Service Accounts
 [access "refs/meta/config"]
 	exclusiveGroupPermissions = read
 	read = group Project Owners