project.config: add removeLabel for most labels

Roughly speaking, any label that someone can apply, they should be able to remove globally: Auto-Submit, Code-Review, Hold, and Run-TryBot. I didn't bother with TryBot-Bypass.

Reorganize the permissions so that labels are all together and matched with their removals.

Change-Id: Iedf8debca7f4e8fb75e65ee97534d0e35434db68
Reviewed-on: https://go-review.googlesource.com/c/All-Projects/+/462055
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>
diff --git a/project.config b/project.config
index 9f03d42..2caf8fc 100644
--- a/project.config
+++ b/project.config
@@ -24,24 +24,29 @@
 	forgeAuthor = group gerritbot
 	forgeAuthor = group may-upload-all-cls
 	forgeCommitter = group gerritbot
-	label-Code-Review = +0..+2 group approvers
-	label-Code-Review = +0..+1 group Registered Users
-	label-Hold = +0..+1 group approvers
 	submit = group approvers
 	submit = group gobot
 	editTopicName = group approvers
-	label-Run-TryBot = +0..+1 group approvers
-	label-Run-TryBot = +0..+1 group may-start-trybots
 	editHashtags = group approvers
 	editHashtags = group gobot
-	label-TryBot-Result = -1..+1 group gobot
-	label-TryBot-Bypass = +0..+1 group approvers
-	label-Auto-Submit = +0..+1 group approvers
 	removeReviewer = group approvers
 	abandon = group may-abandon-changes
 	create = group mdb/golang-gob-branchers
+	label-Auto-Submit = +0..+1 group approvers
+	removeLabel-Auto-Submit = +0..+1 group approvers
+	label-Code-Review = +0..+2 group approvers
+	label-Code-Review = +0..+1 group Registered Users
+	removeLabel-Code-Review = +0..+2 group approvers
+	label-Hold = +0..+1 group approvers
+	removeLabel-Hold = +0..+1 group approvers
+	label-Run-TryBot = +0..+1 group approvers
+	label-Run-TryBot = +0..+1 group may-start-trybots
+	removeLabel-Run-TryBot = +0..+1 group approvers
+	removeLabel-Run-TryBot = +0..+1 group may-start-trybots
+	label-TryBot-Result = -1..+1 group gobot
 	removeLabel-TryBot-Result = -1..+1 group approvers
 	removeLabel-TryBot-Result = -1..+1 group may-start-trybots
+	label-TryBot-Bypass = +0..+1 group approvers
 [access "refs/for/refs/meta/config"]
 	push = group mdb/gerritcodereview-eng
 	push = group mdb/golang-gob-eng-policy