Update Gerrit permissions for global service users (built at http://cl/893733512)

Added permissions:
  Section [refs/heads/*]:
    Read:
      ALLOW: SLSA Policy Verification Service Accounts
    label-SLSA-Policy-Verified:
      ALLOW: SLSA Policy Verification Service Accounts

groups

diff --git a/groups b/groups
index c68bcd4..eef5325 100644
--- a/groups
+++ b/groups
@@ -5,6 +5,7 @@
 361d61bd6145daebabdd8cd594efbf3f1320e1d3                      	pkg-auto-upgrader
 80201c244c0b7afa71278b3c2cafc14a6dc8dff9                      	cos-committers
 a55a5ac8c94a54c26286a552931032dd59b6938d                      	snapshotter
+e5fa5575fffe11f1d579a34cde1c72a1f7920b2d                      	SLSA Policy Verification Service Accounts
 fd69adb7f8328cef1ccd1293514180eac03162e5                      	Service Users
 global:Anonymous-Users                                        	Anonymous Users
 global:Project-Owners                                         	Project Owners
@@ -26,4 +27,4 @@
 mdb:gwsq                                                      	mdb/gwsq
 mdb:kokoro                                                    	mdb/kokoro
 mdb:kokoro-dedicated                                          	mdb/kokoro-dedicated
-mdb:kokoro-gob-readers                                        	mdb/kokoro-gob-readers
\ No newline at end of file
+mdb:kokoro-gob-readers                                        	mdb/kokoro-gob-readers

project.config

diff --git a/project.config b/project.config
index 7f84096..f6bcf6e 100644
--- a/project.config
+++ b/project.config
@@ -84,6 +84,8 @@
 	editHashtags = group mdb/cos-infra-git-admins
 	editHashtags = group mdb/cos-team
 	abandon = group cos-cherry-picker
+	label-SLSA-Policy-Verified = -1..+1 group SLSA Policy Verification Service Accounts
+	Read = group SLSA Policy Verification Service Accounts
 [access "refs/meta/config"]
 	exclusiveGroupPermissions = read
 	create = group Project Owners
@@ -164,4 +166,4 @@
 	canOverrideInChildProjects = true
 [submit-requirement "Code-Review"]
 	submittableIf = label:Code-Review=MAX AND -label:Code-Review=MIN
-	canOverrideInChildProjects = true
\ No newline at end of file
+	canOverrideInChildProjects = true