Update Gerrit permissions for global service users (built at http://cl/893733512)

Added permissions:
  Section [refs/heads/*]:
    Read:
      ALLOW: SLSA Policy Verification Service Accounts
    label-SLSA-Policy-Verified:
      ALLOW: SLSA Policy Verification Service Accounts

groups

diff --git a/groups b/groups
index 375a691..81647d3 100644
--- a/groups
+++ b/groups
@@ -1,5 +1,6 @@
 # UUID                                                        	Group Name
 #
+3bae09f7d5c8d3ab8e1daf2c082453e56fa7344d                      	SLSA Policy Verification Service Accounts
 global:Anonymous-Users                                        	Anonymous Users
 global:Project-Owners                                         	Project Owners
 global:Registered-Users                                       	Registered Users

project.config

diff --git a/project.config b/project.config
index 52898c1..13030f2 100644
--- a/project.config
+++ b/project.config
@@ -29,6 +29,8 @@
 	submit = group mdb/opensource-outreach-eng-dev
 	editTopicName = +force group Project Owners
 	editTopicName = +force group mdb/opensource-outreach-eng-dev
+	label-SLSA-Policy-Verified = -1..+1 group SLSA Policy Verification Service Accounts
+	Read = group SLSA Policy Verification Service Accounts
 [access "refs/meta/config"]
 	exclusiveGroupPermissions = read
 	read = group Project Owners