Update Gerrit permissions for global service users (built at http://cl/893733512)

Added permissions:
  Section [refs/heads/*]:
    Read:
      ALLOW: SLSA Policy Verification Service Accounts
    label-SLSA-Policy-Verified:
      ALLOW: SLSA Policy Verification Service Accounts

groups

diff --git a/groups b/groups
index 24c5785..d4f1537 100644
--- a/groups
+++ b/groups
@@ -1,8 +1,9 @@
-# UUID                 	Group Name
+# UUID                                  	Group Name
 #
-global:Anonymous-Users 	Anonymous Users
-global:Project-Owners  	Project Owners
-global:Registered-Users	Registered Users
-mdb:change2review      	mdb/change2review
-mdb:edge-grpadmin      	mdb/edge-grpadmin
-mdb:edge-oss-admin     	mdb/edge-oss-admin
+0fe712c2c9c74864cadc760e2873ff39d285bd7c	SLSA Policy Verification Service Accounts
+global:Anonymous-Users                  	Anonymous Users
+global:Project-Owners                   	Project Owners
+global:Registered-Users                 	Registered Users
+mdb:change2review                       	mdb/change2review
+mdb:edge-grpadmin                       	mdb/edge-grpadmin
+mdb:edge-oss-admin                      	mdb/edge-oss-admin

project.config

diff --git a/project.config b/project.config
index 0968749..8b87344 100644
--- a/project.config
+++ b/project.config
@@ -35,6 +35,8 @@
 	submit = group mdb/edge-oss-admin
 	editTopicName = +force group Project Owners
 	editTopicName = +force group mdb/edge-grpadmin
+	label-SLSA-Policy-Verified = -1..+1 group SLSA Policy Verification Service Accounts
+	Read = group SLSA Policy Verification Service Accounts
 [access "refs/meta/config"]
 	exclusiveGroupPermissions = read
 	read = group Project Owners