Update Gerrit permissions for global service users (built at http://cl/893733512)

Added permissions:
  Section [refs/heads/*]:
    Read:
      ALLOW: SLSA Policy Verification Service Accounts
    label-SLSA-Policy-Verified:
      ALLOW: SLSA Policy Verification Service Accounts

groups

diff --git a/groups b/groups
index 7a1e31d..8896390 100644
--- a/groups
+++ b/groups
@@ -1,5 +1,6 @@
 # UUID                                  	Group Name
 #
+04dfef6b8be8572406c6614755c6450f26b833d1	SLSA Policy Verification Service Accounts
 9725a09be9dd47e12b769ceed261bf0bbe642f0b	private-cloud Louhi Automation
 global:Anonymous-Users                  	Anonymous Users
 global:Project-Owners                   	Project Owners

project.config

diff --git a/project.config b/project.config
index 33657a3..19b8ed1 100644
--- a/project.config
+++ b/project.config
@@ -32,11 +32,13 @@
 	push = group mdb/private-cloud-gerrit-owners
 	push = group private-cloud Louhi Automation
 	read = group Anonymous Users
+	read = group SLSA Policy Verification Service Accounts
 	revert = group Registered Users
 	submit = group Project Owners
 	submit = group mdb/private-cloud-gerrit-owners
 	pushMerge = group private-cloud Louhi Automation
 	forgeServerAsCommitter = group private-cloud Louhi Automation
+	label-SLSA-Policy-Verified = -1..+1 group SLSA Policy Verification Service Accounts
 [access "refs/meta/config"]
 	exclusiveGroupPermissions = read
 	create = group Project Owners