Update Gerrit permissions for global service users (built at http://cl/893733512)

Added permissions:
  Section [refs/heads/*]:
    Read:
      ALLOW: SLSA Policy Verification Service Accounts
    label-SLSA-Policy-Verified:
      ALLOW: SLSA Policy Verification Service Accounts

groups

diff --git a/groups b/groups
index 2ce05ef..26a79ba 100644
--- a/groups
+++ b/groups
@@ -1,6 +1,7 @@
 # UUID                                                        	Group Name
 #
 38d5c4d7915364fa59272f36e9d33d4078046449                      	Tagging Hat
+3952e3693148885648a5c75269b4b340fed78b25                      	SLSA Policy Verification Service Accounts
 66326fee1502be50f366279038a41476658a69c1                      	Administrators
 863f2dbbc4f4bee592826bd5d5d111f4d71bc654                      	Toggle WIP
 8fba5c67cef14f54732887f0ed5275874f63b0c1                      	Nobody

project.config

diff --git a/project.config b/project.config
index fb98ee1..9a7f398 100644
--- a/project.config
+++ b/project.config
@@ -34,11 +34,13 @@
 	label-Code-Review = -2..+2 group Project Owners
 	label-Code-Review = -1..+1 group Registered Users
 	read = group Anonymous Users
+	read = group SLSA Policy Verification Service Accounts
 	revert = group Registered Users
 	submit = group Administrators
 	submit = group Googlers
 	submit = group Project Owners
 	labelAs-Code-Review = -2..+2 group Administrators
+	label-SLSA-Policy-Verified = -1..+1 group SLSA Policy Verification Service Accounts
 [access "refs/meta/config"]
 	exclusiveGroupPermissions = read
 	create = group Administrators