Update Gerrit permissions for global service users (built at http://cl/893733512)

Added permissions:
  Section [refs/heads/*]:
    Read:
      ALLOW: SLSA Policy Verification Service Accounts
    label-SLSA-Policy-Verified:
      ALLOW: SLSA Policy Verification Service Accounts

groups

diff --git a/groups b/groups
index 7ee97e1..d92a5f0 100644
--- a/groups
+++ b/groups
@@ -1,6 +1,7 @@
 # UUID                                                        	Group Name
 #
 69728fadfa4b65b76c1ab6279e3811c7bac871ca                      	gobot
+758bde83fec3c204baaca867a310d7beb3c732ea                      	SLSA Policy Verification Service Accounts
 adf76ba6894d57eca12698844876eafed66f9990                      	gerritbot
 c7bf27e6d6fe0835046491033e39afd234b33db5                      	may-abandon-changes
 cria:project-golang-approvers                                 	cria/project-golang-approvers

project.config

diff --git a/project.config b/project.config
index 2bfa052..2a45202 100644
--- a/project.config
+++ b/project.config
@@ -58,6 +58,8 @@
 	label-Commit-Queue = +0..+1 group cria/project-golang-may-start-trybots
 	label-Commit-Queue = +0..+1 group gobot
 	labelAs-Commit-Queue = +0..+2 group luci_scoped_account
+	label-SLSA-Policy-Verified = -1..+1 group SLSA Policy Verification Service Accounts
+	Read = group SLSA Policy Verification Service Accounts
 [access "refs/for/refs/meta/config"]
 	push = group mdb/gerritcodereview-eng
 	push = group mdb/golang-gob-eng-policy