Update Gerrit permissions for global service users (built at http://cl/893733512)

Added permissions:
  Section [refs/heads/*]:
    Read:
      ALLOW: SLSA Policy Verification Service Accounts
    label-SLSA-Policy-Verified:
      ALLOW: SLSA Policy Verification Service Accounts

groups

diff --git a/groups b/groups
index 5788ea0..f2a84b9 100644
--- a/groups
+++ b/groups
@@ -1,12 +1,9 @@
-# UUID                                                        	Group Name
+# UUID                                  	Group Name
 #
-986680d4bdf8f3c033b4afc51a3442ceb42e5265                      	Service Users
-fe9ab695b0f1bfc7ac977b928b0971c565803635                      	Public-Contributors
-ff1e0831ffcb2893f59df02deaf66e61397d5560                      	plus2
-global:Anonymous-Users                                        	Anonymous Users
-global:Project-Owners                                         	Project Owners
-google:AI2Pq9oq-Cu_zfmIYq1Q-OqXvJkK8BqkjRBk32zUAjziGf44zhPshxQ	google/wireless-android-busytown-ayeaye-default@twosync-src.google.com
-mdb:clstats-dashboard-dev                                     	mdb/clstats-dashboard-dev
-mdb:gmscore-size                                              	mdb/gmscore-size
-mdb:kotlin-compiler-team                                      	mdb/kotlin-compiler-team
-mdb:r8-team                                                   	mdb/r8-team
+27c2f778cd415cdbf03b924ab1e987ef63f8b0e4	SLSA Policy Verification Service Accounts
+986680d4bdf8f3c033b4afc51a3442ceb42e5265	Service Users
+fe9ab695b0f1bfc7ac977b928b0971c565803635	Public-Contributors
+global:Anonymous-Users                  	Anonymous Users
+global:Project-Owners                   	Project Owners
+mdb:clstats-dashboard-dev               	mdb/clstats-dashboard-dev
+mdb:r8-team                             	mdb/r8-team

project.config

diff --git a/project.config b/project.config
index 079ea51..f9f3ebd 100644
--- a/project.config
+++ b/project.config
@@ -26,11 +26,11 @@
 [access "refs/heads/*"]
 	label-Code-Review = -2..+2 group Project Owners
 	label-Code-Review = -2..+2 group mdb/r8-team
-	label-Commit-Queue = +0..+2 group mdb/r8-team
-	label-Auto-Submit = +0..+1 group mdb/r8-team
 	label-Commit-Queue = +0..+2 group Service Users
-	labelAs-Commit-Queue = +0..+2 group Service Users
 	label-Auto-Submit = +0..+1 group Service Users
+	label-Commit-Queue = +0..+2 group mdb/r8-team
+	labelAs-Commit-Queue = +0..+2 group Service Users
+	label-Auto-Submit = +0..+1 group mdb/r8-team
 	labelAs-Auto-Submit = +0..+1 group Service Users
 	label-Exempt = +0..+1 group Service Users
 	create = group Project Owners
@@ -41,11 +41,13 @@
 	push = group Project Owners
 	push = group mdb/r8-team
 	submit = group Project Owners
-	submit = group mdb/r8-team
 	submit = group Service Users
+	submit = group mdb/r8-team
 	submitAs = group mdb/r8-team
 	editTopicName = +force group Project Owners
 	editTopicName = group mdb/r8-team
+	label-SLSA-Policy-Verified = -1..+1 group SLSA Policy Verification Service Accounts
+	Read = group SLSA Policy Verification Service Accounts
 [access "refs/meta/config"]
 	exclusiveGroupPermissions = read
 	read = group Project Owners