More access changes required for Gerrit Flows

Change-Id: I51afff8930e4e99b159fe68397a840faa1684745
Reviewed-on: https://boringssl-review.googlesource.com/c/All-Projects/+/91187
Reviewed-by: Adam Langley <agl@google.com>

project.config

diff --git a/project.config b/project.config
index 29f7f25..a45fa71 100644
--- a/project.config
+++ b/project.config
@@ -135,7 +135,9 @@
 [capability]
 	administrateServer = group mdb/boringssl-committers
 	administrateServer = group mdb/chrome-git-admins
+	runAs = group mdb/gerrit-flows
 	viewAllAccounts = group boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com
+	viewAllAccounts = group mdb/gerrit-flows
 	viewSecondaryEmails = group boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com
 [plugin "jwtservice"]
 	audience = https://api.cr.dev