Update Gerrit permissions for global service users (built at http://cl/899219124)

Added permissions:
  Section [refs/heads/*]:
    Read:
      ALLOW: autoupdate-vigil-service-accounts
      ALLOW: autoupdate-service-accounts
      ALLOW: autoupdate-onboarding-service-accounts
    Submit:
      ALLOW: autoupdate-vigil-service-accounts
      ALLOW: autoupdate-service-accounts
    Push:
      ALLOW: autoupdate-vigil-service-accounts
      ALLOW: autoupdate-service-accounts
  Section [GLOBAL_CAPABILITIES]:
    viewAllAccounts:
      ALLOW: autoupdate-vigil-service-accounts
      ALLOW: autoupdate-service-accounts
      ALLOW: autoupdate-onboarding-service-accounts

groups

diff --git a/groups b/groups
index 3cb999f..59a1722 100644
--- a/groups
+++ b/groups
@@ -2,6 +2,9 @@
 #
 0505ad05a83b9ffbdfb56b068d7b562d0f725400                      	temp_owners
 4d5d1a1ea49c7985100192f98533c0895c13c9f8                      	SLSA Policy Verification Service Accounts
+c3691904d9d62f829441455351602ff1db742e97                      	autoupdate-onboarding-service-accounts
+d9af4e7c618ed15576f771066579c505048be865                      	autoupdate-vigil-service-accounts
+fe27f00ae4b6b80fc2785de6a404fcc72f493c2e                      	autoupdate-service-accounts
 global:Anonymous-Users                                        	Anonymous Users
 global:Project-Owners                                         	Project Owners
 global:Registered-Users                                       	Registered Users

project.config

diff --git a/project.config b/project.config
index 09eb48b..1642d62 100644
--- a/project.config
+++ b/project.config
@@ -27,6 +27,8 @@
 	editTopicName = group google/kunit-dev@google.com
 	label-Code-Review = -2..+2 group google/kunit-dev@google.com
 	label-Code-Review = -1..+1 group Registered Users
+	submit = group autoupdate-service-accounts
+	submit = group autoupdate-vigil-service-accounts
 	submit = group google/kunit-dev@google.com
 	abandon = group google/kunit-dev@google.com
 	editAssignee = group google/kunit-dev@google.com
@@ -35,6 +37,11 @@
 	forgeAuthor = group google/kunit-dev@google.com
 	label-SLSA-Policy-Verified = -1..+1 group SLSA Policy Verification Service Accounts
 	Read = group SLSA Policy Verification Service Accounts
+	Read = group autoupdate-onboarding-service-accounts
+	Read = group autoupdate-service-accounts
+	Read = group autoupdate-vigil-service-accounts
+	Push = group autoupdate-service-accounts
+	Push = group autoupdate-vigil-service-accounts
 [access "refs/meta/config"]
 	exclusiveGroupPermissions = read
 	create = group Project Owners
@@ -69,6 +76,9 @@
 	administrateServer = group mdb/kunit_owners
 	administrateServer = group temp_owners
 	gerrit-google-manageUsersGet = group mdb/copybara-git-readers
+	viewAllAccounts = group autoupdate-onboarding-service-accounts
+	viewAllAccounts = group autoupdate-service-accounts
+	viewAllAccounts = group autoupdate-vigil-service-accounts
 	viewAllAccounts = group mdb/copybara-git-readers
 [submit-requirement "Code-Review"]
 	submittableIf = label:Code-Review=MAX AND -label:Code-Review=MIN