Update Gerrit permissions for global service users (built at http://cl/893733512)

Added permissions:
  Section [refs/heads/*]:
    Read:
      ALLOW: SLSA Policy Verification Service Accounts
    label-SLSA-Policy-Verified:
      ALLOW: SLSA Policy Verification Service Accounts

groups

diff --git a/groups b/groups
index f9db0aa..d24fa86 100644
--- a/groups
+++ b/groups
@@ -6,6 +6,7 @@
 6aa943a8d1abd393ddcd472d7f0d857acb942d46	aom-interns
 9f26ada1fdf1ae26de801eea0a9a69b37e70a151	aom-committers
 ca5c1c3492e3257adb0dc1b2caeb8a365e3a534f	gerrit-submit-requirements-admins
+d9df1becf7541e47bb0d2afc947c2de46c3f18b6	SLSA Policy Verification Service Accounts
 global:Anonymous-Users                  	Anonymous Users
 global:Project-Owners                   	Project Owners
 global:Registered-Users                 	Registered Users

project.config

diff --git a/project.config b/project.config
index 1577035..9259d6c 100644
--- a/project.config
+++ b/project.config
@@ -35,6 +35,8 @@
 	editTopicName = +force group Administrators
 	editTopicName = +force group Project Owners
 	editTopicName = +force group Registered Users
+	label-SLSA-Policy-Verified = -1..+1 group SLSA Policy Verification Service Accounts
+	Read = group SLSA Policy Verification Service Accounts
 [access "refs/meta/config"]
 	exclusiveGroupPermissions = read
 	read = group Administrators