Grant acls for http://crbug.com/618641

 * LUCI config service: read refs/*
 * CQ service account: refs/heads/*
   * read
   * submit
   * remove Commit-Queue vote of others
   * vote CQ-Verified -1..1
 * Committers: vote on Commit-Queue 0..+2 on refs/heads/*
 
I didn't grant anything to just registered users, however.

Change-Id: I6fa901f8ee37811ffedf5a5b364875a8062e03c4
Reviewed-on: https://boringssl-review.googlesource.com/8380
Reviewed-by: Andrii Shyshkalov <tandrii@google.com>